Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ian Dunn' disclosed a bug submitted by b'whitehatter' 
b'Timing Attack in Google Authenticator - Per User Prompt'

29 Oct 2017

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'Blind SSRF in emblem editor (2)'

28 Oct 2017

b'WebSummit' disclosed a bug submitted by b'hogarth45' 
b'Reflective XSS'

28 Oct 2017

b'Zaption' disclosed a bug submitted by b'hogarth45' 
b'XSS during presentation'

28 Oct 2017

b'bitwarden' disclosed a bug submitted by b'rhynorater' 
b'Organization Admin Privilege Escalation To Owner'

28 Oct 2017

b'VK.com' disclosed a bug submitted by b'sql' 
b'???????? XSS ? ?????? VK'

28 Oct 2017

b'bitwarden' disclosed a bug submitted by b'babayaga_' 
b'Mailgun misconfiguration on email.bitwarden.com'

27 Oct 2017

b'Infogram' disclosed a bug submitted by b'kiddie' 
b'No notification on Password Change'

27 Oct 2017

b'Infogram' disclosed a bug submitted by b'kiddie' 
b'No Confirmation or Notification During Email Change which can leads to account takeover'

27 Oct 2017

b'Infogram' disclosed a bug submitted by b'bluedangerforyou' 
b'Login Cross Site Request Forgery '

27 Oct 2017

b'Infogram' disclosed a bug submitted by b'saikiran-10098' 
b'User Enumeration'

27 Oct 2017

b'IRCCloud' disclosed a bug submitted by b'd0rkerdevil' 
b'Missing robots exclusion header for user uploads'

27 Oct 2017

b'Infogram' disclosed a bug submitted by b'kiddie' 
b'User enumeration via forgot password error message'

27 Oct 2017

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'poison' 
b'CSV Injection https://hub.grab.com'

27 Oct 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com/dubai/gold] CRITICAL - Allowing abitraty amount to become a GOLD MEMBER can lead to HUGE loss for ZOMATO'

27 Oct 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] Unauthenticated access to Internal Sales Data of Zomato through an unrestricted endpoint'

27 Oct 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] IDOR - Leaking all Personal Details of all Zomato Users through an endpoint'

27 Oct 2017

b'Inflection' disclosed a bug submitted by b'gopalsingh27' 
b'Limited Account Takeover via Backup codes '

26 Oct 2017

b'MapsMarker.com e.U.' disclosed a bug submitted by b'nih95had' 
b'facebook button URL should be HTTPS'

26 Oct 2017

b'Tor' disclosed a bug submitted by b'xiaoyinl' 
b'Cross-domain linkability when system time changed in Tor Browser'

26 Oct 2017

1 ... 500 501 502 503 504 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM