Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'alex2018frolov' 
b'???????? XSS ( API )'

23 May 2018

b'Mail.Ru' disclosed a bug submitted by b'alex2018frolov' 
b'XSS ??????????'

23 May 2018

b'Shopify' disclosed a bug submitted by b'0xacb' 
b'SSRF in Exchange leads to ROOT access in all instances'

23 May 2018

b'Bitwarden' disclosed a bug submitted by b'kmodi' 
b'Tracking Bitwarden firefox addon users'

23 May 2018

b'Phabricator' disclosed a bug submitted by b'xiaoyinl' 
b'The "Download Raw Diff" URL is viewable by everyone'

23 May 2018

b'Trello' disclosed a bug submitted by b'slowrabbit' 
b'Session can be continuously reused by editting "token" cookie.'

23 May 2018

b'Starbucks' disclosed a bug submitted by b'bayotop' 
b'XSS on https://www.starbucks.co.uk (can lead to credit card theft) (/shop/paymentmethod)'

22 May 2018

b'VK.com' disclosed a bug submitted by b'trainzment' 
b'????? ??????? ???????? ??? ???? ?????????????'

22 May 2018

b'VK.com' disclosed a bug submitted by b'executor' 
b'Reflected XSS ? /al_audio.php'

22 May 2018

b'LocalTapiola' disclosed a bug submitted by b'd3ad1y_b0073r' 
b'User Information Disclosure via Json response'

22 May 2018

b'Mail.Ru' disclosed a bug submitted by b'vik0nd' 
b'[dl.beepcar.ru] CRLF Injection'

22 May 2018

b'Mail.Ru' disclosed a bug submitted by b'ruvlol' 
b'invalid handling of redirect_uri at o2.mail.ru/jsapi/button'

22 May 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[mobs.mail.ru] nginx path traversal via misconfigured alias'

22 May 2018

b'LocalTapiola' disclosed a bug submitted by b'victorrocha' 
b'Disclosure of Users Information via Wordpress API (?rest_route)'

22 May 2018

b'Phabricator' disclosed a bug submitted by b'ivh' 
b'Administrator can create user without entering high security mode'

22 May 2018

b'ExpressionEngine' disclosed a bug submitted by b'lawrenceamer' 
b'XML Member Proccessing - Local File inclusion Vulnerability '

21 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'brainpanic' 
b'[hekto] open redirect when target domain name is used as html filename on server'

20 May 2018

b'The Internet' disclosed a bug submitted by b'fransrosen' 
b'ACME TLS-SNI-01/02 challenge vulnerable when combined with shared hosting providers'

19 May 2018

b'Perl (IBB)' disclosed a bug submitted by b'geeknik' 
b'CVE-2018-6797: A crafted regular expression can cause a heap buffer write overflow in Perl 5 giving a remote attacker control over bytes written'

19 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[html-pages] Path Traversal in html-pages module allows to read any file from the server with curl'

19 May 2018

1 ... 448 449 450 451 452 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM