REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Brave Software'
disclosed a bug submitted by
b'masatokinugawa'
b'Sending arbitrary IPC messages via overriding Array.prototype.push'
18 Sep 2018
b'Brave Software'
disclosed a bug submitted by
b'masatokinugawa'
b'Brave Browser unexpectedly allows to send arbitrary IPC messages'
18 Sep 2018
b'Shopify'
disclosed a bug submitted by
b'rms'
b'From full-access account to Account Owner'
18 Sep 2018
b'BOHEMIA INTERACTIVE a.s.'
disclosed a bug submitted by
b'hack2684'
b'Weak Password Policy on Signup at https://accounts.bistudio.com/auth'
18 Sep 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'lirantal'
b'http-live-simulator npm module is prone to path traversal attacks'
18 Sep 2018
b'Dropbox'
disclosed a bug submitted by
b'phwd'
b'Dropbox employee benefits documents are available in a test Dropbox folder'
17 Sep 2018
b'New Relic'
disclosed a bug submitted by
b'hackerone77-222'
b'DNS misconfiguration on email.alerts.newrelic.com'
17 Sep 2018
b'BOHEMIA INTERACTIVE a.s.'
disclosed a bug submitted by
b'meals'
b'IDOR to view User Order Information'
17 Sep 2018
b'BOHEMIA INTERACTIVE a.s.'
disclosed a bug submitted by
b'meals'
b'217.147.95.145 NFS Exposed with Zeus Server configs'
17 Sep 2018
b'Zomato'
disclosed a bug submitted by
b'akhil-reni'
b'[www.zomato.com] Tampering with Order Quantity and paying less amount then actual amount, leads to business loss'
17 Sep 2018
b'Uber'
disclosed a bug submitted by
b'mefkan'
b'Reflected XSS on Partners Subdomain'
16 Sep 2018
b'Greenhouse.io'
disclosed a bug submitted by
b'irvinlim'
b'Cache poisoning using NULL bytes and long URLs'
16 Sep 2018
b'Greenhouse.io'
disclosed a bug submitted by
b'irvinlim'
b'Bypass of request line length limit to DoS via cache poisoning'
16 Sep 2018
b'BOHEMIA INTERACTIVE a.s.'
disclosed a bug submitted by
b'ethancruize'
b'Stealing Users OAUTH Tokens via redirect_uri '
14 Sep 2018
b'Dropbox'
disclosed a bug submitted by
b'todayisnew'
b'Exposed Git Repo at http://fileserver.dropboxbusiness.com'
14 Sep 2018
b'Shipt'
disclosed a bug submitted by
b's3cur3'
b'Any user can completely delete their own account without authorization and/or going through any kind of membership cancellation protocol.'
12 Sep 2018
b'OV-chipkaart'
disclosed a bug submitted by
b'bandjes'
b'Personal data of all Dutch public transport cards ("OV-Chipkaart") accessible'
11 Sep 2018
b'HubSpot'
disclosed a bug submitted by
b'm7mdharoun'
b'Reflected XSS and Server Side Template Injection in all HubSpot CMSes'
11 Sep 2018
b'Grabtaxi Holdings Pte Ltd'
disclosed a bug submitted by
b'xsam'
b'Leaking sensitive information on Github lead full access to all Grab Slack channels '
11 Sep 2018
b'Zomato'
disclosed a bug submitted by
b'gerben_javado'
b'[www.zomato.com] SQLi - /php/?????????? - item_id'
11 Sep 2018
1
...
467
468
469
470
471
...
766
BY DENIS WERNER - @NOBBD -
IMPRESSUM