Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'VK.com' disclosed a bug submitted by b'shell_c0de' 
b'???????? ????? WebView'

31 Dec 2018

b'RubyGems' disclosed a bug submitted by b'nmalkin' 
b'Unpacker improperly validates symlinks, allowing gems writes to arbitrary locations'

31 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'wolfdroid' 
b'Exposure of tinyMCE js source code with plugin version disclosure which can leads to exploit further attacks.'

29 Dec 2018

b'Infogram' disclosed a bug submitted by b'marataziat' 
b'User account blocking by Internal Server error'

28 Dec 2018

b'Node.js third-party modules' disclosed a bug submitted by b'3la2kb' 
b'[http-live-simulator] Path traversal vulnerability'

28 Dec 2018

b'Python Cryptographic Authority' disclosed a bug submitted by b'sniper302' 
b'Reflected Xss bypass Content-Type: text/plain '

28 Dec 2018

b'Ruby on Rails' disclosed a bug submitted by b'rosa' 
b"ActiveStorage service's signed URLs can be hijacked via AppCache+Cookie stuffing trick when using GCS or DiskService"

27 Dec 2018

b'Mail.ru' disclosed a bug submitted by b'm00hdi' 
b'Open Redirect In passport.maps.me/logout/?next=//fb.com/'

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Information disclosure'

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Timing attack towards endpoints on the web without CSRF '

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'cablej' 
b'Race condition in performing retest allows duplicated payments'

27 Dec 2018

b'HackerOne' disclosed a bug submitted by b'3thic4l' 
b'A user can request a report to be retested even though the program has not been verified by HackerOne'

27 Dec 2018

b'FormAssembly' disclosed a bug submitted by b'stfloresca' 
b'xmlrpc.php file is enable it will used for (DOS) and bruteforce attack'

27 Dec 2018

b'OLX' disclosed a bug submitted by b'hdbreaker' 
b'blog.praca.olx.pl database credentials exposure'

26 Dec 2018

b'Avito' disclosed a bug submitted by b'kxyry' 
b'[avito.ru] ??????? ????? ?? ????????? ???????????'

24 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'shrey3' 
b'Open Directory'

24 Dec 2018

b'Kaspersky Lab' disclosed a bug submitted by b'palant' 
b'Kaspersky Password Manager: HTML injection in the browser action pop-up via user name'

24 Dec 2018

b'Flash (IBB)' disclosed a bug submitted by b'kinine' 
b'HTTP MitM on Flash Player settings manager allows attacker to set sandbox settings'

23 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamad_iheb' 
b'Server Header disclose The Os and Web server Version '

22 Dec 2018

b'HackerOne' disclosed a bug submitted by b'albinowax' 
b'Denial of service via cache poisoning'

22 Dec 2018

1 ... 452 453 454 455 456 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM