Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'ateek' 
b'Proper verification is not done before sending invitations to researchers for certain private programs with rules e.g. "Participants must be US-based"'

07 Nov 2018

b'Shopify' disclosed a bug submitted by b'dr_dragon' 
b'Stored xss'

07 Nov 2018

b'DuckDuckGo' disclosed a bug submitted by b'smither' 
b'DOM XSS on 50x.html page on proxy.duckduckgo.com'

07 Nov 2018

b'Shopify' disclosed a bug submitted by b'palant' 
b'App messaging can be hijacked by third-party websites'

07 Nov 2018

b'Shopify' disclosed a bug submitted by b'palant' 
b'Admin bar: Incomplete message origin validation results in XSS'

07 Nov 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'hamlon' 
b'UniFi Video Server - Broken access control on system configuration'

07 Nov 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'hamlon' 
b'UniFi Video Server - Arbitrary file upload as SYSTEM'

07 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'cablej_dds' 
b'Redirect on authorization allows account compromise'

06 Nov 2018

b'PayPal' disclosed a bug submitted by b'stefanofinding' 
b'XSS [flow] - on www.paypal.com/paypalme/my/landing (requires user interaction)'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[info.tmgame.mail.ru] Apache Server Status'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[evo2.my.com] Internet Explorer XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[lk-cdn.3igames.mail.ru] apc.php'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[new.wf.mail.ru] XSS Request-URI'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[beta.tracker.my.com] XSS Request-URI'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[gamesventures.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sputnik.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] CRLF Injection / XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] XSS play_now.php'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[target.my.com] CRLF Injection -> XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sj.my.com] Source Code Disclosure /.svn/wc.db'

06 Nov 2018

1 ... 461 462 463 464 465 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM