Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LocalTapiola' disclosed a bug submitted by b'rootnepal' 
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/)'

30 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'lolwaleet' 
b'url-parse package return wrong hostname '

30 Jul 2018

b'Nextcloud' disclosed a bug submitted by b'yzy9951' 
b'[FG-VD-17-063] NextCloud Insufficient Attack Protection Vulnerability Notification'

29 Jul 2018

b'Nextcloud' disclosed a bug submitted by b'kaysbugs' 
b'bypass of 2FA'

29 Jul 2018

b'Harvest' disclosed a bug submitted by b'config' 
b'Unrestricted View to People\xe2\x80\x99s Web Invoices Data without knowing the Unique Hash'

29 Jul 2018

b'Harvest' disclosed a bug submitted by b'config' 
b'Content Injection at First & Last Name Parameters that could Lead Fraud Issue'

29 Jul 2018

b'VK.com' disclosed a bug submitted by b'trainzment' 
b'???????? ?????????? ?????? ???????????? / ??????'

28 Jul 2018

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'SQL Injection in report_xml.php through countryFilter[] parameter'

27 Jul 2018

b'Monero' disclosed a bug submitted by b'phiren' 
b'Attcker can trick monero wallet into reporting it recived twice as much with alternative tx_keypubs'

27 Jul 2018

b'GitLab' disclosed a bug submitted by b'rootbakar28' 
b'HTML TAG INJECTION ON PROFILE NAME'

27 Jul 2018

b'Monero' disclosed a bug submitted by b'kaulse' 
b'forum.getmonero.org Shell upload'

27 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'5ilverhawk' 
b'stored xss in scrape-metadata when reading metadata from an html page'

27 Jul 2018

b'HackerOne' disclosed a bug submitted by b'hackerone_007' 
b'HackerOne customer submitted sensitive link to VirusTotal, exposing confidential information'

26 Jul 2018

b'Shopify' disclosed a bug submitted by b'palant' 
b'Preview bar: Incomplete message origin validation results in XSS'

26 Jul 2018

b'Automattic' disclosed a bug submitted by b'luigigubello' 
b'RCE via Print function [Simplenote 1.1.3 - Desktop app] '

26 Jul 2018

b'New Relic' disclosed a bug submitted by b'scrszy' 
b'stamp2-azure-ext.newrelic.com is vulnerable to MS12-020'

24 Jul 2018

b'New Relic' disclosed a bug submitted by b'badcracker' 
b' Missing security best practices (leads to further impact) '

24 Jul 2018

b'Passit' disclosed a bug submitted by b'exception' 
b'X-Content-Type-Options has not been set at app.passit.io'

24 Jul 2018

b'WordPress' disclosed a bug submitted by b'arunthelegion' 
b'xss - reflected'

24 Jul 2018

b'Starbucks' disclosed a bug submitted by b'txt3rob' 
b'svcardproxydevus.starbucks.com Subdomain take over'

23 Jul 2018

1 ... 485 486 487 488 489 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM