Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PortSwigger Web Security' disclosed a bug submitted by b'egyptghost1' 
b'Activat burp suite pro with the old license after transfared to anothe account'

19 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b'diabllo' 
b'Race condition ?? market.games.mail.ru'

18 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'misterch0c' 
b'Stored XSS in Node-Red'

18 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'caioluders' 
b"[entitlements] Command injection on the 'path' parameter"

18 Jul 2018

b'OLX' disclosed a bug submitted by b'd4w' 
b'XSS in OLX.pl ("title" in new advertisement)'

18 Jul 2018

b'HackerOne' disclosed a bug submitted by b'rbcafe' 
b'Ajouter le m\xc3\xaame utilisateur que celui d\xc3\xa9j\xc3\xa0 inscrit dans les \xc3\xa9quipes'

17 Jul 2018

b'GitLab' disclosed a bug submitted by b'lahataleputih' 
b'Potensial SSRF via Git repository URL '

16 Jul 2018

b'GitLab' disclosed a bug submitted by b'phillycheeze' 
b'Persistent XSS - Selecting users as allowed merge request approvers'

16 Jul 2018

b'GitLab' disclosed a bug submitted by b'phillycheeze' 
b'XSS (Persistent) - Selecting role(s) for protected branches'

16 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b'aietix' 
b'Attacker can send requests from mail.ru server'

16 Jul 2018

b'ICQ' disclosed a bug submitted by b's3r3n3storm' 
b'XSS at https://icq.com/people'

16 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b'c37hun' 
b'CSRF ?? biz.mail.ru'

16 Jul 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'amans' 
b'Two Factor Authentication Bypass'

16 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b'webr0ck' 
b'????? ???????? ?????????? Nginx ? ???? ????????'

16 Jul 2018

b'Node.js' disclosed a bug submitted by b'joy271' 
b'Your page has 2 blocking CSS resources. This causes a delay in rendering your page.'

15 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[statics-server] XSS via injected iframe in file name when statics-server displays directory index in the browser'

14 Jul 2018

b'Slack' disclosed a bug submitted by b'albatraoz' 
b'Internal SSRF bypass using slash commands at api.slack.com'

12 Jul 2018

b'Passit' disclosed a bug submitted by b'retcyb' 
b'Old sessions does not expire On changing password via https://app.passit.io/account/change-password '

12 Jul 2018

b'Nextcloud' disclosed a bug submitted by b'samix' 
b'Accessing to download.nextcloud.com from original ip adreess | insecure Download'

12 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[m-server] HTML Injection in filenames displayed as directory listing in the browser allows to embed iframe with malicious JavaScript code'

12 Jul 2018

1 ... 483 484 485 486 487 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM