Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OLX' disclosed a bug submitted by b'ibrahimd' 
b'Bypass CSP frame-ancestors at olx.co.za, olx.com.gh'

23 Sep 2018

b'OLX' disclosed a bug submitted by b'ibrahimd' 
b'Reflective XSS at olx.ph'

23 Sep 2018

b'Starbucks' disclosed a bug submitted by b'linkks' 
b'Backup Source Code Detected'

21 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'smit' 
b'Leaking Username and Password in the URLs via Virustotal, can leads to account takeover'

21 Sep 2018

b'' disclosed a bug submitted by b'alyssa_herrera' 
b'Remote Command execution due to image tragick'

21 Sep 2018

b'Informatica' disclosed a bug submitted by b'neolead' 
b'Cisco RCE'

21 Sep 2018

b'Tor' disclosed a bug submitted by b'rbcafe' 
b'Expose user IP if TOR crashs'

21 Sep 2018

b'Imgur' disclosed a bug submitted by b'kiyell' 
b'Go.imgur.com can be used to phish for account information'

21 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b'CSRF in cancel group and private show requests'

21 Sep 2018

b'GitLab' disclosed a bug submitted by b'phillycheeze' 
b'Persistent XSS - Deleting a project (No Longer Vulnerable in 10.7)'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'mikkz' 
b'Users may still able to view chat room panel of password protected rooms'

20 Sep 2018

b'OpenSSL (IBB)' disclosed a bug submitted by b'guido' 
b'Client DoS due to large DH parameter (CVE-2018-0732)'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'imrannissar' 
b'Forget password link not expiring after email change.'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'gujjuboy10x00' 
b'Login form on non-HTTPS page on http://stream.highwebmedia.com/auth/login/'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'memon' 
b'Web cache deception attack - expose token information'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'ninjan' 
b'Homograph attack on redirect URL (https://chaturbate.com/external_link/?url)'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'ninjan' 
b'CSV Injection with the CSV export feature'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'ninjan' 
b'Blind SSRF on image proxy camo.stream.highwebmedia.com'

20 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'inhibitor181' 
b'Open redirect in securegatewayaccess.com / secure.chaturbate.com via prejoin_data parameter'

19 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'nahamsec' 
b"CSS Injection on /embed/ via bgcolor parameter leaks user's CSRF token and allows for XSS "

19 Sep 2018

1 ... 471 472 473 474 475 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM