Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[harp] Unsafe rendering of Markdown files'

06 Apr 2019

b'Automattic' disclosed a bug submitted by b'yzy9951' 
b'[FG-VD-19-022] Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'FileUpload Plugin: CSRF (delete all attached files)'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'Persistent XSS via Signatures'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'jsConnect Plugin: Takeover of existing account'

06 Apr 2019

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b"Removing a user from a private group doesn't remove him from group's project, if his project's role was changed"

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'eremeev' 
b'Invited team member can disclosure slack channels'

05 Apr 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'??????? Site Exposes DD2648 forms'

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'kapytein' 
b'Path traversal leading to limited CSRF on GET requests on two endpoints'

05 Apr 2019

b'GitLab' disclosed a bug submitted by b'edoverflow' 
b"Claiming package names in GitLab's automatic package referencer."

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Client-Side Race Condition using Marketo, allows sending user to data-protocol in Safari when form without onSuccess is submitted on www.hackerone.com'

05 Apr 2019

b'Shopify' disclosed a bug submitted by b'jobert' 
b'H1514 Shopify API ruby SDK session setup lacks input validation, resulting in SSRF and leakage of client secret'

05 Apr 2019

b'Unikrn' disclosed a bug submitted by b'v4lid0l' 
b'bypass Claudflare access crm.mautic.com'

05 Apr 2019

b'Unikrn' disclosed a bug submitted by b'v4lid0l' 
b'Path Disclosure Vulnerability http://crm.******.com'

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Corrupted Authorization header can cause logs not to be ingested properly in ????????'

04 Apr 2019

b'HackerOne' disclosed a bug submitted by b'm7mdharoun' 
b'Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeover'

04 Apr 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'H1514 Server Side Template Injection in Return Magic email templates?'

04 Apr 2019

b'Shopify' disclosed a bug submitted by b'zhurig' 
b'SSRF in hatchful.shopify.com'

04 Apr 2019

b'Shopify' disclosed a bug submitted by b'h13-' 
b'Using GraphQL, STAFF with NO explicit permissions on Store can retrieve Shopify Payments Balance.'

04 Apr 2019

b'Starbucks' disclosed a bug submitted by b'damian89' 
b'SSRF at ideas.starbucks.com'

03 Apr 2019

1 ... 444 445 446 447 448 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM