Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TTS Bug Bounty' disclosed a bug submitted by b'picklepwns' 
b'Subdomain Takeover'

28 Nov 2017

b'GitLab' disclosed a bug submitted by b'intercept9' 
b'SSRF via git Repo by URL Abuse'

28 Nov 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] IDOR - Delete/Deactivate any special menu of any Restaurants from Zomato'

28 Nov 2017

b'VK.com' disclosed a bug submitted by b'executor' 
b'Stored xss ? /lead_forms_app.php'

28 Nov 2017

b'Zomato' disclosed a bug submitted by b'hisham' 
b'Use any User to Follow you (Increase Followers) [IDOR]'

28 Nov 2017

b'Razer US' disclosed a bug submitted by b'hisxo' 
b'Reflected XSS on domain support.razerzone.com'

27 Nov 2017

b'Razer US' disclosed a bug submitted by b'sp1d3rs' 
b'DOM XSS and Open Redirect on the themes.razerzone.com'

27 Nov 2017

b'Razer US' disclosed a bug submitted by b'quistertow' 
b'2 Subdomain takeovers'

27 Nov 2017

b'VK.com' disclosed a bug submitted by b'vladvis' 
b'XSS ? ?????? ??????????'

27 Nov 2017

b'Automattic' disclosed a bug submitted by b'cartooncookies' 
b'Stored XSS Using Media'

26 Nov 2017

b'Tor' disclosed a bug submitted by b'guido' 
b'[tor] pre-emptive defenses, potential vulnerabilities'

26 Nov 2017

b'Tor' disclosed a bug submitted by b'guido' 
b'16 instances where return value of OpenSSL i2d_RSAPublicKey is discarded -- might lead to use of uninitialized memory'

26 Nov 2017

b'Ed' disclosed a bug submitted by b'jackds' 
b'Possible to redirect to a (non-existing) subdomain after logging in via GitHub (leaking the token)'

25 Nov 2017

b'Ed' disclosed a bug submitted by b'sp1d3rs' 
b'Oauth flow on the comments widget login can lead to the access code leakage'

24 Nov 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'hacknroll' 
b'Privilege Escalation using API->Feature'

24 Nov 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'hacknroll' 
b'CSRF: Replacing the router configuration backup having an \'operator\' user and bypassing the "Referer:\' whitelist protection'

24 Nov 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'hacknroll' 
b'Privilege Escalation: From operator to ubnt (and root) with non-interactive Session Hijacking'

24 Nov 2017

b'Infogram' disclosed a bug submitted by b'muon4' 
b'Persistent XSS in share button'

23 Nov 2017

b'WakaTime' disclosed a bug submitted by b'noob-walid' 
b'SSH backdated version open port'

23 Nov 2017

b'OWOX, Inc.' disclosed a bug submitted by b'sp1d3rs' 
b'Server-side cache poisoning leads to the http://my.dev.owox.com inaccessibility'

23 Nov 2017

1 ... 500 501 502 503 504 ... 748

BY DENIS WERNER - @NOBBD - IMPRESSUM