Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'' disclosed a bug submitted by b'edoverflow' 
b"Cross-site request forgery vulnerability resulting in the deletion of a user's account."

15 Aug 2018

b'Mail.Ru' disclosed a bug submitted by b'obmi' 
b'Stored self-xss and its escalation to a victim account in e.mail.ru'

15 Aug 2018

b'Cloudflare' disclosed a bug submitted by b'grampae' 
b'Remote file inclusion using "/cdn-cgi/pe/bag2?r[]=" '

15 Aug 2018

b'Mail.Ru' disclosed a bug submitted by b'shafigullin' 
b'XSS touch.mail.ru compose Body'

15 Aug 2018

b'Mail.Ru' disclosed a bug submitted by b'shafigullin' 
b'XSS account.mail.ru in state JSON script'

15 Aug 2018

b'Mail.Ru' disclosed a bug submitted by b'shafigullin' 
b'XSS e.mail.ru fixSpecialSymbols'

15 Aug 2018

b'Kaspersky Lab' disclosed a bug submitted by b'rkhunter' 
b'test report'

15 Aug 2018

b'DuckDuckGo' disclosed a bug submitted by b'fpatrik' 
b'SSRF in proxy.duckduckgo.com via the image_host parameter'

15 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'becojo' 
b'[flintcms] Account takeover due to blind MongoDB injection in password reset'

15 Aug 2018

b'Mail.Ru' disclosed a bug submitted by b'maxarr' 
b'XSS ? ???? ??????, ? ????? ?????? ?????.'

15 Aug 2018

b'??????' disclosed a bug submitted by b'cdl' 
b'Phone Call to XXE via Interactive Voice Response'

15 Aug 2018

b'Shopify' disclosed a bug submitted by b'shahzad__sadiq' 
b'Stored XSS on activity'

14 Aug 2018

b'SEMrush' disclosed a bug submitted by b'ethical_hacker30121996' 
b'Password reset token leakage via referer'

14 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'danny_grander' 
b'Arbitrary File Write through archive extraction'

12 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'danny_grander' 
b'Arbitrary File Write Through Archive Extraction'

12 Aug 2018

b'Ed' disclosed a bug submitted by b'glassofbeer' 
b'Physical Laptop Takeover'

12 Aug 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Private program policy page still accessible after user left the program'

12 Aug 2018

b'Passit' disclosed a bug submitted by b'alpha66' 
b'Session not changed after password reset'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'paramdham' 
b'Authentication Required When password change '

11 Aug 2018

b'Passit' disclosed a bug submitted by b'muon4' 
b'app.passit.io is vulnerable against Brute Force password quessing attack'

11 Aug 2018

1 ... 439 440 441 442 443 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM