Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Coinbase' disclosed a bug submitted by b'whysoleet' 
b'New Device Confirmation Bug'

08 Sep 2017

b'GitLab' disclosed a bug submitted by b'cdl' 
b'Impersonation attack via Broken Link in Resellers Page'

08 Sep 2017

b'Shopify' disclosed a bug submitted by b'azizs3curity' 
b'Stored XSS Deleting Menu Links in the Shopify Admin'

08 Sep 2017

b'WordPress' disclosed a bug submitted by b'mdisrail' 
b'Clickjacking mercantile.wordpress.org'

08 Sep 2017

b'Maximum' disclosed a bug submitted by b'aliashber1' 
b'[Cross Domain Referrer Leakage] Password Reset Token Leaking to Third party Sites.'

07 Sep 2017

b'ExpressionEngine' disclosed a bug submitted by b'freetom' 
b'Potential code injection in fun delete_directory'

07 Sep 2017

b'ExpressionEngine' disclosed a bug submitted by b'freetom' 
b'Image lib - unescaped file path'

07 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'ramakanthk35' 
b'Email Spoofing - SPF record set to Neutral'

06 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'ramakanthk35' 
b'Email Spoofing - SPF record set to Neutral'

06 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'tolo7010' 
b'calc.gsa.gov is vulnerable to CSV/Excel Command Injection'

06 Sep 2017

b'GitLab' disclosed a bug submitted by b'b3nac' 
b'Gitlab is vulnerable to impersonation attacks due to broken links'

06 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'jackds' 
b'Subdomain take-over of {REDACTED}.18f.gov'

06 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'edio' 
b'{REDACTED}.data.gov subdomain takeover.'

06 Sep 2017

b'Unikrn' disclosed a bug submitted by b'geekboy' 
b'Flash CSRF: Update Ad Frequency %: [cp-ng.pinion.gg]'

06 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'shivanagakrishna' 
b'Logic issue in email change process'

06 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'hulskr' 
b'User enumeration from failed login error message'

06 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'r0p3' 
b'federalist.18f.gov vulnerable to Sweet32 attack'

05 Sep 2017

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'Stored XSS in snapmatic comments'

05 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'Double Stored Cross-Site scripting in the admin panel'

05 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'[IDOR] The authenticated user can restart website build or view build logs on any another Federalist account'

05 Sep 2017

1 ... 503 504 505 506 507 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM