Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Chaturbate' disclosed a bug submitted by b'glc' 
b'XSS on secure.chaturbate through SWF'

18 Oct 2018

b'Cloudflare' disclosed a bug submitted by b'cujanovic' 
b'DOM XSS on 1.1.1.1(one.one.one.one)'

17 Oct 2018

b'Rockstar Games' disclosed a bug submitted by b'richardcao' 
b'Exploiting Misconfigured CORS to Steal User Information'

17 Oct 2018

b'Rockstar Games' disclosed a bug submitted by b'dhananjaygarg19' 
b'Found CSRF Vulnerability in https://support.rockstargames.com/'

16 Oct 2018

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'DOM XSS on 50x.html page'

16 Oct 2018

b'Tor' disclosed a bug submitted by b'greenwolf' 
b'Email Spoofing Possible on torproject.org Email Domain'

16 Oct 2018

b'Starbucks' disclosed a bug submitted by b'radoooz' 
b'DVR default username and password'

15 Oct 2018

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'[NR Insights] Pull any Insights/NRQL data from any NR account'

15 Oct 2018

b'PHP (IBB)' disclosed a bug submitted by b'fms' 
b'linkinfo - openbasedir bypass on Windows PHP'

15 Oct 2018

b'Stellar.org' disclosed a bug submitted by b'nebolsin' 
b"It's possible to put SDX orderbook into invalid state and execute trades at arbitrary price"

14 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Command Injection Vulnerability in libnmap Package'

14 Oct 2018

b'Stellar.org' disclosed a bug submitted by b'orbitlens' 
b'Exploitable vulnerability in SDEX'

14 Oct 2018

b'MariaDB' disclosed a bug submitted by b'putsi' 
b'SSRF on jira.mariadb.org'

13 Oct 2018

b'Zendesk' disclosed a bug submitted by b'apfeifer27' 
b'Stored Cross Site Scripting on Zendesk agent dashboard'

12 Oct 2018

b'MariaDB' disclosed a bug submitted by b'vijay_kumar1110' 
b'xmlrpc.php on mariadb.org can lead to DDOS and brute force attacks'

12 Oct 2018

b'Pornhub' disclosed a bug submitted by b'dudez' 
b'Stored XSS in photo comment functionality'

12 Oct 2018

b'MariaDB' disclosed a bug submitted by b'niteshpande' 
b'vulnerable to Cross-site Request Forgery'

12 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'Double authentication bypass'

11 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'http://admin.proonline.group (gifts.mail.ru shop operator) admin panel blind XSS'

11 Oct 2018

b'Redtube' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS on the https://www.redtube.com/users/[profile]/collections'

10 Oct 2018

1 ... 432 433 434 435 436 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM