Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Grammarly' disclosed a bug submitted by b'gamer7112' 
b'DOM based CSS Injection on grammarly.com'

06 May 2019

b'Automattic' disclosed a bug submitted by b'wild0ni0n' 
b'DOM based XSS in the WooCommerce plugin'

05 May 2019

b'Node.js third-party modules' disclosed a bug submitted by b'yonjah' 
b'XSS in Bootbox'

04 May 2019

b'HackerOne' disclosed a bug submitted by b'honoki' 
b'DOM Based XSS in www.hackerone.com via PostMessage (bypass of #398054)'

04 May 2019

b'Node.js third-party modules' disclosed a bug submitted by b'guardian_trooper' 
b'[serve] Path Traversal'

03 May 2019

b'Redtube' disclosed a bug submitted by b'black_b' 
b'idor allows you to delete photos and album from a gallery'

03 May 2019

b'Tron Foundation' disclosed a bug submitted by b'danish1970' 
b'DOS attack by consuming all CPU and using all available memory'

02 May 2019

b'Tron Foundation' disclosed a bug submitted by b'z3t' 
b'DNS Rebinding leads to irremovable entries in NodeManager'

02 May 2019

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'XSS and cache poisoning via upload.twitter.com on ton.twitter.com'

01 May 2019

b'Chaturbate' disclosed a bug submitted by b'testingforbugs' 
b'Unrestricted POST request size on /customer_support/information_form/ endpoint'

01 May 2019

b'Vanilla' disclosed a bug submitted by b'jameelnabbo' 
b'XSS: Group search terms'

01 May 2019

b'Shipt' disclosed a bug submitted by b'codeslayer137' 
b'Price manipulation via fraction values (Parameter Tampering)'

01 May 2019

b'Zomato' disclosed a bug submitted by b'yashrs' 
b'Open AWS S3 bucket leaks all Images uploaded to Zomato chat'

01 May 2019

b'Chaturbate' disclosed a bug submitted by b'teuvokas' 
b'DoS attacks utilizing camo.stream.highwebmedia.com'

01 May 2019

b'Zomato' disclosed a bug submitted by b'khoiasd' 
b'[www.zomato.com] Blind XSS in one of the admin dashboard'

01 May 2019

b'Grammarly' disclosed a bug submitted by b'sarmadkhan' 
b'Reflected Cross Site Scripting (XSS)'

30 Apr 2019

b'Grammarly' disclosed a bug submitted by b'metnew' 
b'Emails from Grammarly missing sanitization(lack of validation?) -> HTML injection in emails'

30 Apr 2019

b'Grammarly' disclosed a bug submitted by b'metnew' 
b'"More on Wikipedia" link disclose "Referrer" and leak `window.opener` reference for arbitrary websites'

30 Apr 2019

b'Node.js third-party modules' disclosed a bug submitted by b'ronperris' 
b'[finalhandler] Insecure Default Configuration'

29 Apr 2019

b'Twitter' disclosed a bug submitted by b'rahulkankrale' 
b'Twitter lite(Android): Vulnerable to local file steal, Javascript injection, Open redirect '

29 Apr 2019

1 ... 439 440 441 442 443 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM