Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Chaturbate' disclosed a bug submitted by b'sam75434' 
b'Homograph attack on redirect URL '

19 Oct 2018

b'Ruby' disclosed a bug submitted by b'tylereckstein' 
b'OpenSSL::X509::Name Equality Check Does Not Work, Patch included'

19 Oct 2018

b'Dropbox' disclosed a bug submitted by b'dumeelvavvalu' 
b'Stored XSS in dropboxforum.com'

19 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'betterknowme' 
b'No rate limit in affiliate statsapi endpoint'

19 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'betterknowme' 
b'No rate limit in stats api token endpoint'

19 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'Blind XSS pets.mail.ru/admin/'

19 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'Full account takeover am.ru'

19 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'Disclosure of user email address and Deanonymization [mail.ru] + Blind | Stored XSS pets.mail.ru'

19 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'hack2tools' 
b'????????????? ???? ( ????? )'

19 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'truwa' 
b'?????? ?????? ?? ??????? ? ????????? ?????????? mediator.media'

19 Oct 2018

b'WakaTime' disclosed a bug submitted by b'bobrov' 
b'[wakatime.com] HTML Injection github-btn.html'

19 Oct 2018

b'Shopify' disclosed a bug submitted by b'bobrov' 
b'[ux.shopify.com] Subdomain takeover'

19 Oct 2018

b'Upserve ' disclosed a bug submitted by b'bobrov' 
b'[theacademy.upserve.com] Reflected XSS Query-String'

19 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'tungpun' 
b'[serve] Stored XSS in the filename when directories listing'

19 Oct 2018

b'Gatecoin' disclosed a bug submitted by b'bobrov' 
b'DOM Based XSS charting_library'

19 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[serve] XSS via HTML tag injection in directory lisiting page'

19 Oct 2018

b'New Relic' disclosed a bug submitted by b'rootbakar' 
b'WordPress username enumeration (/author)'

18 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[apex-publish-static-files] Command Injection on connectString'

18 Oct 2018

b'LinkedIn' disclosed a bug submitted by b'jonathanbouman' 
b'Persistent XSS (unvalidated Open Graph embed) at LinkedIn.com'

18 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'yuvraj_dighe' 
b'Update Chat Allowed By Option ( without age verification )'

18 Oct 2018

1 ... 431 432 433 434 435 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM