Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'k3m' 
b'Unauthorized access to a system used for CI/CD processes'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'albinowax' 
b'Defacement of catalog.data.gov via web cache poisoning to stored DOMXSS'

01 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'avlidienbrunn' 
b'Stored XSS in chat topic due to insecure emoticon parsing on any message type'

01 Nov 2018

b'Twitter' disclosed a bug submitted by b'bobrov' 
b'[staging-engineering.gnip.com] Publicly accessible GIT directory'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'bobrov' 
b'[idp.fr.cloud.gov] Open Redirect'

01 Nov 2018

b'Badoo' disclosed a bug submitted by b'jarvis7' 
b'??????????? ???? ????? ??????????? ID'

01 Nov 2018

b'Python (IBB)' disclosed a bug submitted by b'tiran' 
b"XML hash collision DoS vulnerability in Python's xml.etree module"

31 Oct 2018

b'Perl (IBB)' disclosed a bug submitted by b'karas' 
b'[CVE-2018-6913] heap-buffer-overflow in S_pack_rec'

31 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'nismo' 
b'Chaturbate "/chat_ignore_list/" endpoint does not check for Account status: Disabled before adding Ignore via POST'

31 Oct 2018

b'Miniclip' disclosed a bug submitted by b'paulochoupina' 
b'xss in miniclip.com'

31 Oct 2018

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'Getting all the CD keys of any game'

31 Oct 2018

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'SSRF vulnerability on proxy.duckduckgo.com (access to metadata server on AWS)'

31 Oct 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Hacker can bypass 2FA requirement and reporter blacklist through embedded submission form'

31 Oct 2018

b'' disclosed a bug submitted by b'bagipro' 
b'Golden techniques to bypass host validations in Android apps'

30 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf' 
b'Prototype pollution attack (lodash / constructor.prototype)'

30 Oct 2018

b'GitLab' disclosed a bug submitted by b'8ayac' 
b'Stored XSS on Issue details page'

30 Oct 2018

b'Dropbox' disclosed a bug submitted by b'paulos_' 
b'Dropbox Paper - Markdown XSS'

29 Oct 2018

b'Automattic' disclosed a bug submitted by b'paulos_' 
b'Multiple File Manipulation bugs in WP Super Cache '

29 Oct 2018

b'Apache httpd (IBB)' disclosed a bug submitted by b'97ffb8d5' 
b'DoS for HTTP/2 connections by crafted requests (CVE-2018-1333)'

28 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Code Injection Vulnerability in morgan Package'

28 Oct 2018

1 ... 457 458 459 460 461 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM