Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Unikrn' disclosed a bug submitted by b'tolo7010' 
b'CSRF in Raffles Ticket Purchasing'

10 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'Reflected XSS on bbe_open_htmleditor_popup.php of BBE Theme via "value"-GET-parameter'

09 Apr 2018

b'MyCrypto' disclosed a bug submitted by b't-pwn' 
b'HTML Injection on https://www.mycrypto.com/'

09 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'jacksonkv67' 
b'xmlrpc.php FILE IS enable it will used for bruteforce attack and denial of service'

09 Apr 2018

b'drchrono' disclosed a bug submitted by b'd0rkerdevil' 
b'SSL/TLS BEAST ATTACK'

09 Apr 2018

b'Coinbase' disclosed a bug submitted by b'paulos_' 
b'User provided values trusted in sensitive actions'

09 Apr 2018

b'Coinbase' disclosed a bug submitted by b'paulos_' 
b'User provided values passed to PHP unset() function'

09 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[bracket-template] Reflected XSS possible when variable passed via GET parameter is used in template'

09 Apr 2018

b'Showmax' disclosed a bug submitted by b'mostafamamdoh' 
b'Stored blind xss on showmax support team'

09 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`atob` allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below'

08 Apr 2018

b'Zomato' disclosed a bug submitted by b'akamble937' 
b'Zomato.com Reflected Cross Site Scripting'

08 Apr 2018

b'Keybase' disclosed a bug submitted by b'mishre' 
b'Fix bypass of different processing of usernames on Hackernews'

08 Apr 2018

b'Shopify' disclosed a bug submitted by b'gromoza' 
b'XSS *.myshopify.com/collections/vendors?q='

08 Apr 2018

b'Zomato' disclosed a bug submitted by b'strukt' 
b'Reflected XSS on https://www.zomato.com'

07 Apr 2018

b'VK.com' disclosed a bug submitted by b'povargek' 
b'???????? ????? ?????? ???????? ? ???????? ?? ???? SMS, ????? ??? ????????????????? ???????'

06 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`http-proxy-agent` passes unsanitized options to Buffer(arg), resulting in DoS and uninitialized memory leak'

05 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`sshpk` is vulnerable to ReDoS when parsing crafted invalid public keys'

04 Apr 2018

b'Coinbase' disclosed a bug submitted by b'dawgyg' 
b'Double Payout via PayPal'

04 Apr 2018

b'Coinbase' disclosed a bug submitted by b'ambisafe' 
b'ETH contract handling errors'

04 Apr 2018

b'ExpressionEngine' disclosed a bug submitted by b'strukt' 
b'Arbitrary file upload when setting an avatar'

04 Apr 2018

1 ... 469 470 471 472 473 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM