Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Infogram' disclosed a bug submitted by b'theappsec' 
b'Stored XSS in infogram.com via language '

22 Jun 2019

b'Khan Academy' disclosed a bug submitted by b'rlaneth' 
b'Cross-Site Request Forgery (CSRF) vulnerability on API endpoint allows account takeovers'

22 Jun 2019

b'ecobee' disclosed a bug submitted by b'prinsfrank' 
b'Open API - AWS S3 GET Bucket (List Objects) Version 1'

21 Jun 2019

b'Shopify' disclosed a bug submitted by b'tems' 
b'DOM XSS via Shopify.API.Modal.initialize'

21 Jun 2019

b'Redtube' disclosed a bug submitted by b'tony_tsep' 
b'SSRF and local file disclosure by video upload on https://www.redtube.com/upload'

21 Jun 2019

b'SEMrush' disclosed a bug submitted by b'r0hack' 
b'XSS Reflected on my_report'

21 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'francescocar' 
b'Vulnerable W3 Total Cache plugin version in use on nextcloud.com'

21 Jun 2019

b'Capital One' disclosed a bug submitted by b'linkks' 
b' Heartbleed Bug'

19 Jun 2019

b'Capital One' disclosed a bug submitted by b'linkks' 
b'Apache server-status enabled'

19 Jun 2019

b'Starbucks' disclosed a bug submitted by b'd3417_' 
b'Blind SQL Injection on starbucks.com.gt and WAF Bypass :*'

19 Jun 2019

b'Collibra' disclosed a bug submitted by b'freem0' 
b'Access to the database on onboarding.collibra.com'

19 Jun 2019

b'ZEIT' disclosed a bug submitted by b'kaunghtetzaw' 
b'Open redirect vuln on login'

18 Jun 2019

b'Shopify' disclosed a bug submitted by b'h13-' 
b'STAFF member with NO Explicit permissions can view `ActivityFeed` via GraphQL'

18 Jun 2019

b'Node.js third-party modules' disclosed a bug submitted by b'verichains' 
b'[untitled-model] sql injection'

18 Jun 2019

b'VK.com' disclosed a bug submitted by b'linkks' 
b'CVE-2018-0296'

17 Jun 2019

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'Giving myself access to NR1 UI / one.newrelic.com without the proper feature flags on my account'

17 Jun 2019

b'ICQ' disclosed a bug submitted by b'bigshape' 
b"ICQ 10.0.12371 icq: Uri Handler '-testability' URL File Insecure Library Loading Code Execution Vulnerability"

17 Jun 2019

b'ok.ru' disclosed a bug submitted by b'exadmin' 
b"Plain text password for 'unknown' user exist in URL when opening jira.apiok.ru"

17 Jun 2019

b'Shipt' disclosed a bug submitted by b'mubassirpatel' 
b'Multiple Subdomain Takeovers: fly.staging.shipt.com, fly.us-west-2.staging.shipt.com, fly.us-east-1.staging.shipt.com'

17 Jun 2019

b'ecobee' disclosed a bug submitted by b'mik317' 
b'CSTI on https://www.ecobee.com leads to XSS'

16 Jun 2019

1 ... 427 428 429 430 431 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM