Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'dienpv' 
b'[localhost-now] bypassing url filter which leads to read content of arbitrary file'

30 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'tungpun' 
b'[serve] Directory listing and File access even when they have been set to be ignored (using dot-slash)'

30 May 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'????????? ???????????? ?????????? ??????? '

30 May 2018

b'Zomato' disclosed a bug submitted by b'saltedfish' 
b'[www.zomato.com] SQLi on `order_id` parameter'

30 May 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Private program email forwarding response invitation not expire after first use.'

30 May 2018

b'GitLab' disclosed a bug submitted by b'strukt' 
b'SSRF when importing a project from a git repo by URL'

29 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'defmax' 
b"Command injection in 'pdf-image'"

29 May 2018

b'Mail.Ru' disclosed a bug submitted by b'mobius07' 
b'???????? ?????????? phpinfo() ?? ????? https://agent.mail.ru'

29 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[sexstatic] HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with <iframe> element used in directory name'

29 May 2018

b'Mail.Ru' disclosed a bug submitted by b'catferq' 
b'LFI in beta.mail.ru'

28 May 2018

b'Coalition, Inc.' disclosed a bug submitted by b'emitrani' 
b'Non-Cloudflare IPs allowed to access origin servers'

28 May 2018

b'Dovecot' disclosed a bug submitted by b'k4nik4' 
b'Buffer overflow in sha3'

27 May 2018

b'Snapchat' disclosed a bug submitted by b'esnard' 
b'XSS found on Snapchat website'

26 May 2018

b'Boozt Fashion AB' disclosed a bug submitted by b'ramsexy' 
b'[www.boozt.com] - Authentication bypass'

25 May 2018

b'Instacart' disclosed a bug submitted by b'bigshaq' 
b'View & add to cart unlisted items via IDOR'

25 May 2018

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Aapp name leakage on economy history page'

24 May 2018

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Unfiltered input allows for XSS in "Playtime Item Grants" fields'

24 May 2018

b'Valve' disclosed a bug submitted by b'osintopsec' 
b'Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile Name'

24 May 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'GitHub import allows user to create child group under existing namespace'

24 May 2018

b'MyCrypto' disclosed a bug submitted by b'nitesculucian' 
b'Missing SPF record for the in scope domain'

24 May 2018

1 ... 461 462 463 464 465 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM