REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Shopify'
disclosed a bug submitted by
b'm7mdharoun'
b'subdomain Takeover at blog.exchangemarketplace.com '
01 Oct 2018
b'ICQ'
disclosed a bug submitted by
b'3c75'
b'Gain access to random information via group chat "about" property'
01 Oct 2018
b'Reverb.com'
disclosed a bug submitted by
b'sandeep_hodkasia'
b'Stored xss in shop name @ lp.reverb.com'
01 Oct 2018
b'ICQ'
disclosed a bug submitted by
b'executor'
b'Stored xss ? ??????????? ?????????.'
01 Oct 2018
b'ICQ'
disclosed a bug submitted by
b'n4sty'
b'XSS ??? ?????????? ? ??? ???????????? '
01 Oct 2018
b'ICQ'
disclosed a bug submitted by
b'flamezzz'
b'[web.icq.com] Stored XSS in link when sending message'
01 Oct 2018
b'Chaturbate'
disclosed a bug submitted by
b'lucky_sen'
b'Rate limit missing at room login'
30 Sep 2018
b'Inflection'
disclosed a bug submitted by
b'exception'
b'Session ID is accessible via XSS'
30 Sep 2018
b'PullString'
disclosed a bug submitted by
b'exception'
b'Open redirect at staging.pullstring.com'
30 Sep 2018
b'Shopify'
disclosed a bug submitted by
b'tony_tsep'
b'Stored XSS on buy button'
29 Sep 2018
b'Brave Software'
disclosed a bug submitted by
b'metnew'
b'Local files reading using `link[rel="import"]`'
29 Sep 2018
b'Brave Software'
disclosed a bug submitted by
b'metnew'
b'Local files reading from the "file://" origin through `brave://`'
29 Sep 2018
b'Monero'
disclosed a bug submitted by
b'ahook'
b'Malicious get_random_rct_outs.bin rpc can cause a near-infinite loop'
28 Sep 2018
b'Monero'
disclosed a bug submitted by
b'talko'
b'Stack Overflow in JSON RPC Server'
28 Sep 2018
b'Upserve '
disclosed a bug submitted by
b'naasha'
b'Reflected xss on theacademy.upserve.com'
28 Sep 2018
b'ExpressionEngine'
disclosed a bug submitted by
b'unbaiat'
b'License verification mechanism can be bypassed'
28 Sep 2018
b'ExpressionEngine'
disclosed a bug submitted by
b'unbaiat'
b'Persistent XSS via malicious license file'
28 Sep 2018
b'Weblate'
disclosed a bug submitted by
b'crazy_wonk'
b'2nd issue>>> flood of email no rate limit on delete account confirmation email >> '
28 Sep 2018
b'Weblate'
disclosed a bug submitted by
b'crazy_wonk'
b'flood of comment no rate limit on commnets >> by using different user agent '
28 Sep 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'asgerf'
b'Prototype pollution attack (merge.recursive)'
28 Sep 2018
1
...
463
464
465
466
467
...
766
BY DENIS WERNER - @NOBBD -
IMPRESSUM