Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[buttle] HTML Injection in filename leads to XSS when directory listing is displayed in the browser'

04 Jul 2018

b'HackerOne' disclosed a bug submitted by b'nismo' 
b'Team object in GraphQL that have a published external program may expose existence of a private program'

04 Jul 2018

b'HackerOne' disclosed a bug submitted by b'ruvlol' 
b'Blind SSRF on errors.hackerone.net due to Sentry misconfiguration'

04 Jul 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'bogdantcaciuc' 
b'Bypass blocked profile protection on aircrm.ubnt.com'

03 Jul 2018

b'Tor' disclosed a bug submitted by b'qab' 
b'De-anonymization by visiting specially crafted bookmark.'

03 Jul 2018

b'Valve' disclosed a bug submitted by b'milkgames' 
b"resetreportedcount & updatetags doesn't verify appid param"

02 Jul 2018

b'Valve' disclosed a bug submitted by b'delite' 
b'Suspended users can bypass UGC upload ban'

02 Jul 2018

b'Valve' disclosed a bug submitted by b'alyssa_herrera' 
b'ImageMagick GIF coder vulnerability leading to memory disclosure'

02 Jul 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'achapman' 
b'UniFi Video Server web interface Configuration Restore path traversal leading to local system compromise'

02 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b'pisarenko' 
b'?????? XSS ? ????? ?????? torg.mail.ru ????? ?????'

02 Jul 2018

b'RBKmoney' disclosed a bug submitted by b'n00bsec' 
b'SUBDOMAIN TAKEOVER [http://dev.rbk.money/]'

02 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'tungpun' 
b'[serve] Server Directory Traversal'

02 Jul 2018

b'VK.com' disclosed a bug submitted by b'namthar' 
b'????????? ?????? ?????? ???????? (??? ?????) ????? ????? ?????????????? ??????'

30 Jun 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'?????????? ???? ??????????? ?????? ?????? , ??????? ???????????? ???????? + ???'

30 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ginden' 
b'Privilage escalation with malicious .npmrc'

30 Jun 2018

b'ok.ru' disclosed a bug submitted by b'lincoln9932' 
b'????? ??????? XSS ? ?????? ?????????? m.ok.ru'

30 Jun 2018

b'VK.com' disclosed a bug submitted by b'shad0walk3rtn' 
b'Open Redirection Vulnerability in m.vk.com'

29 Jun 2018

b'SEMrush' disclosed a bug submitted by b'asad_anwar' 
b'Error Page Content Spoofing or Text Injection '

29 Jun 2018

b'Electroneum' disclosed a bug submitted by b'hackermanbob' 
b'Hackerone [Mainsite Vulnerability]'

28 Jun 2018

b'Udemy' disclosed a bug submitted by b'kazan71p' 
b'[engineering.udemy.com] - Subdomain Takeover (ghost.io)'

27 Jun 2018

1 ... 441 442 443 444 445 ... 728

BY DENIS WERNER - @NOBBD - IMPRESSUM