Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[buttle] Unsafe rendering of Markdown files'

06 Jan 2019

b'Liberapay' disclosed a bug submitted by b'gouveaheitor' 
b'User Enumeration '

05 Jan 2019

b'HackerOne' disclosed a bug submitted by b'mga_bobo' 
b"User login page doesn't implement any form of rate limiting"

04 Jan 2019

b'Inflection' disclosed a bug submitted by b'csanuragjain' 
b'Malicious callback url can be set while creating application in identity'

03 Jan 2019

b'Node.js third-party modules' disclosed a bug submitted by b'shivasurya' 
b'[static-resource-server] Path Traversal allows to read content of arbitrary file on the server'

03 Jan 2019

b'Smule' disclosed a bug submitted by b'fr_0_ank' 
b'Disclosure of information about the system, configuration files.'

03 Jan 2019

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Submitting report through Embedded Submission form gives user indefinite access to a profile'

03 Jan 2019

b'Khan Academy' disclosed a bug submitted by b'sameerphad72' 
b'Creating Unlimited Fake Accounts.'

02 Jan 2019

b'HackerOne' disclosed a bug submitted by b'thefrog' 
b'@wearehackerone.com is vulnerable to namespace attacks due to hackerone.com not being RFC2142 compliant.'

02 Jan 2019

b'RATELIMITED' disclosed a bug submitted by b'z0mb13' 
b'Local File Download'

01 Jan 2019

b'VK.com' disclosed a bug submitted by b'shell_c0de' 
b'???????? ????? WebView'

31 Dec 2018

b'RubyGems' disclosed a bug submitted by b'nmalkin' 
b'Unpacker improperly validates symlinks, allowing gems writes to arbitrary locations'

31 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'wolfdroid' 
b'Exposure of tinyMCE js source code with plugin version disclosure which can leads to exploit further attacks.'

29 Dec 2018

b'Infogram' disclosed a bug submitted by b'marataziat' 
b'User account blocking by Internal Server error'

28 Dec 2018

b'Node.js third-party modules' disclosed a bug submitted by b'3la2kb' 
b'[http-live-simulator] Path traversal vulnerability'

28 Dec 2018

b'Python Cryptographic Authority' disclosed a bug submitted by b'sniper302' 
b'Reflected Xss bypass Content-Type: text/plain '

28 Dec 2018

b'Ruby on Rails' disclosed a bug submitted by b'rosa' 
b"ActiveStorage service's signed URLs can be hijacked via AppCache+Cookie stuffing trick when using GCS or DiskService"

27 Dec 2018

b'Mail.ru' disclosed a bug submitted by b'm00hdi' 
b'Open Redirect In passport.maps.me/logout/?next=//fb.com/'

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Information disclosure'

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Timing attack towards endpoints on the web without CSRF '

27 Dec 2018

1 ... 446 447 448 449 450 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM