Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'juji' 
b'Unauthenticated LFI revealing log information'

26 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'nwoltman' 
b'Fastify denial-of-service vulnerability with large JSON payloads'

25 Jan 2018

b'Razer US' disclosed a bug submitted by b'edio' 
b'Authenticated DOM-based XSS in deals.razerzone.com via the rurl parameter.'

24 Jan 2018

b'Razer US' disclosed a bug submitted by b's_p_q_r' 
b'[zvault.razerzone.com] URL validation bypass'

24 Jan 2018

b'Razer US' disclosed a bug submitted by b'edio' 
b'POST XSS in careers.razerzone.com via the txt_email parameter.'

24 Jan 2018

b'Razer US' disclosed a bug submitted by b'arafat' 
b'Reflected XSS on https://press.razerzone.com'

24 Jan 2018

b'Keybase' disclosed a bug submitted by b'edio' 
b'Claiming ownership of GitHub handles via forked GitHub gists.'

23 Jan 2018

b'HackerOne' disclosed a bug submitted by b'us111' 
b'While adding a payment method - Notification email not sent to newly added email ID as well as there is no verification for new email id (Paypal)'

23 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[serve] Directory index of arbitrary folder available due to lack of sanitization of %2e and %2f characters in url'

23 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[augustine] Static Web Server Directory Traversal via Crafted GET Request'

23 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[lactate] Static Web Server Directory Traversal via Crafted GET Request'

23 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[redis-commander] Reflected SWF XSS via vulnerable "clipboard.swf" component'

23 Jan 2018

b'Starbucks' disclosed a bug submitted by b'bigbug' 
b'SQL injection in partner id field on https://www.teavana.com (Sign-up form)'

23 Jan 2018

b'Starbucks' disclosed a bug submitted by b'bobrov' 
b'[stagecafrstore.starbucks.com] CRLF Injection, XSS'

22 Jan 2018

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b'Common response suggestion is sent to Google Analytics when user accepts duplicate comment Genius suggestion'

22 Jan 2018

b'Mavenlink' disclosed a bug submitted by b'aroly' 
b"Information disclosure when trying to delete an expense's attachment on m.mavenlink.com "

20 Jan 2018

b'QIWI' disclosed a bug submitted by b'tikoo_sahil' 
b'Information disclosure on https://paycard.rapida.ru'

20 Jan 2018

b'concrete5' disclosed a bug submitted by b'sts' 
b'Reflected XSS vulnerability in Database name field on installation screen'

20 Jan 2018

b'HackerOne' disclosed a bug submitted by b'666reda' 
b'Submitted reports state logs leakage'

19 Jan 2018

b'Inflection' disclosed a bug submitted by b'hackedbrain' 
b'Information Disclosure and Privilege Escalation in app.goodhire.com/member/developers/api-settings'

18 Jan 2018

1 ... 470 471 472 473 474 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM