Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Liberapay' disclosed a bug submitted by b'albatraoz' 
b'CSRF to make any user accept the invitation to the team'

02 Jun 2018

b'Liberapay' disclosed a bug submitted by b'europa' 
b'Origin IP found, Cloudflare bypassed'

02 Jun 2018

b'HackerOne' disclosed a bug submitted by b'amans' 
b'HackerOne support disclosing report state without checking user identity'

02 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'patrickrbc' 
b'Unrestricted file upload (RCE)'

02 Jun 2018

b'Twitter' disclosed a bug submitted by b'trabajoduro_2' 
b'No Rate Limit in email leads to huge Mass mailings'

01 Jun 2018

b'PHP (IBB)' disclosed a bug submitted by b'97ffb8d5' 
b'Heap Buffer Overflow (READ: 1786) in exif_iif_add_value'

01 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'arafat' 
b'Clickjacking Vulnerability on https://support.my.com/games/ticket/xxxx/'

01 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'tungpun' 
b'[serve] Directory listing and File access even when they have been set to be ignored'

31 May 2018

b'Valve' disclosed a bug submitted by b'milkgames' 
b"GetReports works for hubs you don't have access to"

30 May 2018

b'Starbucks' disclosed a bug submitted by b'damian89' 
b'Unauthorized access to jiratest.starbucks.com '

30 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'dienpv' 
b'[localhost-now] bypassing url filter which leads to read content of arbitrary file'

30 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'tungpun' 
b'[serve] Directory listing and File access even when they have been set to be ignored (using dot-slash)'

30 May 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'????????? ???????????? ?????????? ??????? '

30 May 2018

b'Zomato' disclosed a bug submitted by b'saltedfish' 
b'[www.zomato.com] SQLi on `order_id` parameter'

30 May 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Private program email forwarding response invitation not expire after first use.'

30 May 2018

b'GitLab' disclosed a bug submitted by b'strukt' 
b'SSRF when importing a project from a git repo by URL'

29 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'defmax' 
b"Command injection in 'pdf-image'"

29 May 2018

b'Mail.Ru' disclosed a bug submitted by b'mobius07' 
b'???????? ?????????? phpinfo() ?? ????? https://agent.mail.ru'

29 May 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[sexstatic] HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with <iframe> element used in directory name'

29 May 2018

b'Mail.Ru' disclosed a bug submitted by b'catferq' 
b'LFI in beta.mail.ru'

28 May 2018

1 ... 478 479 480 481 482 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM