Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[simple-server] HTML with iframe element can be used as filename, which might lead to load and execute malicious JavaScript '

01 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[angular-http-server] Path Traversal in angular-http-server.js allows to read arbitrary file from the remote server'

01 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'alyssa_herrera' 
b'[uppy] Stored XSS due to crafted SVG file'

01 Mar 2018

b'RubyGems' disclosed a bug submitted by b'plover' 
b'Negative size in tar header causes infinite loop'

01 Mar 2018

b'Zomato' disclosed a bug submitted by b'nbsp' 
b'SSRF in https://www.zomato.com???? allows reading local files and website source code'

28 Feb 2018

b'Nextcloud' disclosed a bug submitted by b'qasim' 
b'Email Notification should be get while changing password on apps.nextcloud.com'

28 Feb 2018

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'grouptherapy' 
b'Registration enabled on ???grab.com'

28 Feb 2018

b'Shopify' disclosed a bug submitted by b'0xacb' 
b'Email Reply'

27 Feb 2018

b'LocalTapiola' disclosed a bug submitted by b'yonm13' 
b'Test Page available with Server details on /r/test (viestinta.lahitapiola.fi)'

27 Feb 2018

b'LocalTapiola' disclosed a bug submitted by b'yonm13' 
b'RCE using bash command injection on /system/images (toimitilat.lahitapiola.fi)'

27 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[hekto] Path Traversal vulnerability allows to read content of arbitrary files'

26 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[simplehttpserver] Stored XSS in file names leads to malicious JavaScript code execution when directory listing is output in HTML'

26 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[anywhere] An iframe element with url to malicious HTML file (with eg. JavaScript malware) can be used as filename and served via anywhere'

26 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[626] Path Traversal allows to read arbitrary file from remote server'

26 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[localhost-now] Path Traversal allows to read content of arbitrary file'

26 Feb 2018

b'Informatica' disclosed a bug submitted by b'modam3r5' 
b'[http://www.informatica.com]- info disclosure'

26 Feb 2018

b'Cloudflare' disclosed a bug submitted by b'linkks' 
b'SSRF '

25 Feb 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'???????? ??????? ? ???????? ??????? ??????'

24 Feb 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'XSS ? ?????? ??? ? ??????????? '

24 Feb 2018

b'VK.com' disclosed a bug submitted by b'linkks' 
b'error'

24 Feb 2018

1 ... 429 430 431 432 433 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM