Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'coldd' 
b'stored XSS (angular injection) in support.rockstargames.com using zendesk register form via name parameter'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'glc' 
b'Stored XSS on chaturbate.com (wish list)'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'skavans' 
b'Passive stored XSS at broadcast room'

06 Nov 2018

b'Phabricator' disclosed a bug submitted by b'mishre' 
b'Exposing voting results on the Slowvote application without actually voting'

05 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Prototype Pollution Vulnerability in cached-path-relative Package'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[tianma-static] Stored xss on filename'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[takeapeek] Path traversal allow to expose directory and files'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[knightjs] Path Traversal allows to read content of arbitrary files'

02 Nov 2018

b'Starbucks' disclosed a bug submitted by b'k3m' 
b'Unauthorized access to a system used for CI/CD processes'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'albinowax' 
b'Defacement of catalog.data.gov via web cache poisoning to stored DOMXSS'

01 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'avlidienbrunn' 
b'Stored XSS in chat topic due to insecure emoticon parsing on any message type'

01 Nov 2018

b'Twitter' disclosed a bug submitted by b'bobrov' 
b'[staging-engineering.gnip.com] Publicly accessible GIT directory'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'bobrov' 
b'[idp.fr.cloud.gov] Open Redirect'

01 Nov 2018

b'Badoo' disclosed a bug submitted by b'jarvis7' 
b'??????????? ???? ????? ??????????? ID'

01 Nov 2018

b'Python (IBB)' disclosed a bug submitted by b'tiran' 
b"XML hash collision DoS vulnerability in Python's xml.etree module"

31 Oct 2018

b'Perl (IBB)' disclosed a bug submitted by b'karas' 
b'[CVE-2018-6913] heap-buffer-overflow in S_pack_rec'

31 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'nismo' 
b'Chaturbate "/chat_ignore_list/" endpoint does not check for Account status: Disabled before adding Ignore via POST'

31 Oct 2018

b'Miniclip' disclosed a bug submitted by b'paulochoupina' 
b'xss in miniclip.com'

31 Oct 2018

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'Getting all the CD keys of any game'

31 Oct 2018

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'SSRF vulnerability on proxy.duckduckgo.com (access to metadata server on AWS)'

31 Oct 2018

1 ... 462 463 464 465 466 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM