Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'napalube' 
b'CSRF. ???????? ???????? ?????, ?????????? ?????????'

29 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'bytehope' 
b'??? ???????? ? ID ????????? ???????? ?????, ?????????? ????? ??????-?? ??????.'

29 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'ras-it' 
b'Reflected XSS in https://e.mail.ru/'

28 Dec 2017

b'Rockstar Games' disclosed a bug submitted by b'fa1rlight' 
b'Stored XSS via Send crew invite'

28 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'haxta4ok00' 
b'[et.mail.ru] ssrf 2'

28 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'pwnsdx' 
b'XSS when replying / forwarding to a malicious email on iOS'

28 Dec 2017

b'Uber' disclosed a bug submitted by b'ss3' 
b'Design Issue at riders.uber.com/profile'

28 Dec 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] IDOR - Delete/Deactivate ANY/ALL Promos through a Post Request at **clients/promoDataHandler.php**'

28 Dec 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'Admin Access to a Clone of Zomato Dashboard giving access to each and every Zomato Database'

28 Dec 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Invalid read leading to a segfault'

28 Dec 2017

b'Zomato' disclosed a bug submitted by b'chriszielinski' 
b'User Profiles Leak PII in HTML Document for Mobile Browser User Agents'

28 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'dzmitry' 
b'Download attachments with traversal path into any sdcard directory (incomplete fix 106097)'

28 Dec 2017

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'High server resource usage on captcha (viestinta.lahitapiola.fi)'

27 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'luigigubello' 
b'touch.mail.ru/messages - Stored XSS'

27 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'ruvlol' 
b'Unupdated ImageMagic leads to uninitialized server memory disclosure '

27 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'ruvlol' 
b'Stored XSS and html injection in biz.mail.ru'

27 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'ruvlol' 
b"A manager of a determinate group of users still might have access to any user account from any group that he doesn't administrate anymore."

27 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'buglloc' 
b'XSS on https://account.mail.ru/login via postMessage'

27 Dec 2017

b'Uber' disclosed a bug submitted by b'gregoryvperry' 
b'muber-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint'

26 Dec 2017

b'Uber' disclosed a bug submitted by b'gregoryvperry' 
b'lite:sess Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint'

26 Dec 2017

1 ... 474 475 476 477 478 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM