Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'palant' 
b'App messaging can be hijacked by third-party websites'

07 Nov 2018

b'Shopify' disclosed a bug submitted by b'palant' 
b'Admin bar: Incomplete message origin validation results in XSS'

07 Nov 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'hamlon' 
b'UniFi Video Server - Broken access control on system configuration'

07 Nov 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'hamlon' 
b'UniFi Video Server - Arbitrary file upload as SYSTEM'

07 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'cablej_dds' 
b'Redirect on authorization allows account compromise'

06 Nov 2018

b'PayPal' disclosed a bug submitted by b'stefanofinding' 
b'XSS [flow] - on www.paypal.com/paypalme/my/landing (requires user interaction)'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[info.tmgame.mail.ru] Apache Server Status'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[evo2.my.com] Internet Explorer XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[lk-cdn.3igames.mail.ru] apc.php'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[new.wf.mail.ru] XSS Request-URI'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[beta.tracker.my.com] XSS Request-URI'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[gamesventures.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sputnik.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] CRLF Injection / XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] XSS play_now.php'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[target.my.com] CRLF Injection -> XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sj.my.com] Source Code Disclosure /.svn/wc.db'

06 Nov 2018

b'Rockstar Games' disclosed a bug submitted by b'coldd' 
b'stored XSS (angular injection) in support.rockstargames.com using zendesk register form via name parameter'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'glc' 
b'Stored XSS on chaturbate.com (wish list)'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'skavans' 
b'Passive stored XSS at broadcast room'

06 Nov 2018

1 ... 431 432 433 434 435 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM