Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WordPress' disclosed a bug submitted by b'sp1d3rs' 
b'Open Redirect on the nl.wordpress.net'

22 Feb 2018

b'Razer US' disclosed a bug submitted by b'sp1d3rs' 
b'Open redirect on oauth2.razerzone.com caused by server misconfiguration when using triple slash after hostname'

22 Feb 2018

b'VK.com' disclosed a bug submitted by b'linkks' 
b'Opcode Cache'

22 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'orange' 
b'Path Traversal on Resolve-Path'

22 Feb 2018

b'LocalTapiola' disclosed a bug submitted by b'muon4' 
b'Verbose error message reveals internal system hostnames, protols and used ports (yrityspalvelu.tapiola.fi)'

22 Feb 2018

b'RubyGems' disclosed a bug submitted by b'ysx' 
b'[gem server] Stored XSS via crafted JavaScript URL inclusion in Gemspec'

22 Feb 2018

b'Twitter' disclosed a bug submitted by b'omespino' 
b'POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)'

22 Feb 2018

b'Monero' disclosed a bug submitted by b'bugbound' 
b'remote access to localhost daemon, can issue jsonrpc commands'

22 Feb 2018

b'GitLab' disclosed a bug submitted by b'edoverflow' 
b'Using GitLab to monitor and hijack domains in mass quantity.'

21 Feb 2018

b'Inflection' disclosed a bug submitted by b'exception' 
b'Open redirect at app.goodhire.com via ReturnUrl parameter'

21 Feb 2018

b'Inflection' disclosed a bug submitted by b'exception' 
b'XSS at https://app.goodhire.com/member/GH.aspx'

21 Feb 2018

b'SEMrush' disclosed a bug submitted by b'r0p3' 
b'Single Sing On - Clickjacking'

21 Feb 2018

b'Mail.Ru' disclosed a bug submitted by b'isaeva' 
b"filin.mail.ru user's e-mail address disclosure"

21 Feb 2018

b'VK.com' disclosed a bug submitted by b'povargek' 
b'???????? ?????????? ? ???????? email, ????? ???? ??? ???????????????? ??????-???????????'

20 Feb 2018

b'HackerOne' disclosed a bug submitted by b'bangrorox' 
b'Information Disclosure which violate program privacy'

20 Feb 2018

b'ownCloud' disclosed a bug submitted by b'hexlax' 
b'OS Command Injection via tainted PATH environment variable in findBinaryPath'

18 Feb 2018

b'Phabricator' disclosed a bug submitted by b'mishre' 
b'Window.opener fix bypass'

18 Feb 2018

b'Phabricator' disclosed a bug submitted by b'ranjit_p' 
b'Window.opener protection Bypass'

17 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[crud-file-server] Stored XSS in filenames when directory index is served by crud-file-server'

17 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[public] Path Traversal allows to read content of arbitrary files'

17 Feb 2018

1 ... 476 477 478 479 480 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM