Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'Local files reading from the "file://" origin through `brave://`'

29 Sep 2018

b'Monero' disclosed a bug submitted by b'ahook' 
b'Malicious get_random_rct_outs.bin rpc can cause a near-infinite loop'

28 Sep 2018

b'Monero' disclosed a bug submitted by b'talko' 
b'Stack Overflow in JSON RPC Server'

28 Sep 2018

b'Upserve ' disclosed a bug submitted by b'naasha' 
b'Reflected xss on theacademy.upserve.com'

28 Sep 2018

b'ExpressionEngine' disclosed a bug submitted by b'unbaiat' 
b'License verification mechanism can be bypassed'

28 Sep 2018

b'ExpressionEngine' disclosed a bug submitted by b'unbaiat' 
b'Persistent XSS via malicious license file'

28 Sep 2018

b'Weblate' disclosed a bug submitted by b'crazy_wonk' 
b'2nd issue>>> flood of email no rate limit on delete account confirmation email >> '

28 Sep 2018

b'Weblate' disclosed a bug submitted by b'crazy_wonk' 
b'flood of comment no rate limit on commnets >> by using different user agent '

28 Sep 2018

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf' 
b'Prototype pollution attack (merge.recursive)'

28 Sep 2018

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf' 
b'Prototype pollution attack (defaults-deep / constructor.prototype)'

28 Sep 2018

b'WordPress' disclosed a bug submitted by b'm7mdharoun' 
b'Reflected Swf XSS In ( plugins.svn.wordpress.org )'

27 Sep 2018

b'Redtube' disclosed a bug submitted by b'haythamnaamane' 
b'CSRF Full Account Takeover - https://redtube.com/settings'

27 Sep 2018

b'Rocket.Chat' disclosed a bug submitted by b'24nitin' 
b'XSS (stored) Wizard is saving executable code'

27 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b'CSRF in "send them an email and browser notification" feature'

27 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b'Bypass subdomain limits using race condition'

27 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b"Stats Token doesn't expire after deactivating account"

27 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b'CSRF in REPORT EMOTICON feature'

27 Sep 2018

b'Chaturbate' disclosed a bug submitted by b'encrypt' 
b'Private and group tokens per minute endpoint active for disabled users'

27 Sep 2018

b'Nextcloud' disclosed a bug submitted by b'cyphar' 
b'twofactor_auth bypassable if provider fails to load'

27 Sep 2018

b'Vanilla' disclosed a bug submitted by b'mr_r0w07' 
b'Unsanitized input in email field'

27 Sep 2018

1 ... 473 474 475 476 477 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM