Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'CRLF injection mcs.mail.ru (leads to XSS)'

19 Jun 2018

b'LocalTapiola' disclosed a bug submitted by b'yasar' 
b'Reflected XSS (myynti.lahitapiolarahoitus.fi)'

19 Jun 2018

b'Shopify' disclosed a bug submitted by b'llt4l' 
b'Subdomain Takeover - https://competition.shopify.com/'

19 Jun 2018

b'VK.com' disclosed a bug submitted by b'trainzment' 
b'???????? ????? ??????? ?? ?????'

18 Jun 2018

b'Zomato' disclosed a bug submitted by b'bagipro' 
b'[Zomato Android/iOS] Theft of user session'

17 Jun 2018

b'Reverb.com' disclosed a bug submitted by b'bagipro' 
b'Disclosure of all uploads to Cloudinary via hardcoded api secret in Android app'

17 Jun 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ??????????? ?????????????? ? ?????? ???? (???? ?????????).'

17 Jun 2018

b'MapsMarker.com e.U.' disclosed a bug submitted by b'damian89' 
b'[Informational] Possible SQL Injection in inc/ajax-actions-frontend.php'

17 Jun 2018

b'VK.com' disclosed a bug submitted by b'paul-raddoor' 
b'[???????? email ? ????????] by admin@notify.vk.com | email-flood'

16 Jun 2018

b'Vanilla' disclosed a bug submitted by b'fiona' 
b'Forum Users Information Disclosure'

16 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'mlucool' 
b'npm packages that overlap with core node packages'

16 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'caioluders' 
b'[git-dummy-commit] Command injection on the msg parameter'

15 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'greendog' 
b'Insecure implementation of deserialization in funcster'

15 Jun 2018

b'Nextcloud' disclosed a bug submitted by b'reinism' 
b'File access control rules not enforced on image files'

15 Jun 2018

b'Shopify' disclosed a bug submitted by b'tbh' 
b'Improper access check by Kit leads to controlling attributes of store & getting analytics by deleted Store member via dual messenger A/C'

15 Jun 2018

b'Shopify' disclosed a bug submitted by b'rijalrojan' 
b'Publicly Accessible Datadog link'

15 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`njwt` allocates uninitialized Buffers when number is passed in base64urlEncode input'

14 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'lirantal' 
b'Remote Command Execution vulnerability in pullit'

14 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[file-static-server] Path Traversal allows to read content of arbitrary file on the server'

14 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`utile` allocates uninitialized Buffers when number is passed in input'

14 Jun 2018

1 ... 491 492 493 494 495 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM