Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Perl (IBB)' disclosed a bug submitted by b'karas' 
b'[CVE-2018-6913] heap-buffer-overflow in S_pack_rec'

31 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'nismo' 
b'Chaturbate "/chat_ignore_list/" endpoint does not check for Account status: Disabled before adding Ignore via POST'

31 Oct 2018

b'Miniclip' disclosed a bug submitted by b'paulochoupina' 
b'xss in miniclip.com'

31 Oct 2018

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'Getting all the CD keys of any game'

31 Oct 2018

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'SSRF vulnerability on proxy.duckduckgo.com (access to metadata server on AWS)'

31 Oct 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Hacker can bypass 2FA requirement and reporter blacklist through embedded submission form'

31 Oct 2018

b'' disclosed a bug submitted by b'bagipro' 
b'Golden techniques to bypass host validations in Android apps'

30 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf' 
b'Prototype pollution attack (lodash / constructor.prototype)'

30 Oct 2018

b'GitLab' disclosed a bug submitted by b'8ayac' 
b'Stored XSS on Issue details page'

30 Oct 2018

b'Dropbox' disclosed a bug submitted by b'paulos_' 
b'Dropbox Paper - Markdown XSS'

29 Oct 2018

b'Automattic' disclosed a bug submitted by b'paulos_' 
b'Multiple File Manipulation bugs in WP Super Cache '

29 Oct 2018

b'Apache httpd (IBB)' disclosed a bug submitted by b'97ffb8d5' 
b'DoS for HTTP/2 connections by crafted requests (CVE-2018-1333)'

28 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Code Injection Vulnerability in morgan Package'

28 Oct 2018

b'Flock' disclosed a bug submitted by b'prial261' 
b'Subdomain takeover dew to missconfigured project settings for Custom domain\xc2\xa0.'

26 Oct 2018

b'VK.com' disclosed a bug submitted by b'norver' 
b'[??????/Android] ???????????? BroadcastReceiver ????????? ????????? ???? ??????? ? ?????????? ??????????? ??????? ????????????????? ??????????'

26 Oct 2018

b'HackerOne' disclosed a bug submitted by b'popeax' 
b'Improper UUID validation results in bypass of #419896'

25 Oct 2018

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'User with privilege to maintain External Programs can update certain churned HackerOne programs'

25 Oct 2018

b'Nextcloud' disclosed a bug submitted by b'frankspierings' 
b'Session fixation in password protected public download.'

25 Oct 2018

b'Nextcloud' disclosed a bug submitted by b'bugdiscloseguys' 
b'Authentication Issue'

25 Oct 2018

b'Vanilla' disclosed a bug submitted by b'balis0ng' 
b'A SQL injection vulnerability in Vanilla'

25 Oct 2018

1 ... 429 430 431 432 433 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM