Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'Race condition on the Federalist API endpoints can lead to the Denial of Service attack'

05 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b"The user, who was deleted from Github Organization, still can access all functions of federalist, in case he didn't do logout"

05 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'The Federalsit session cookie (federalist.sid) is not properly invalidated - backdoor access to the account is possible'

05 Sep 2017

b'Uber' disclosed a bug submitted by b'mishre' 
b'SAML Authentication Bypass on uchat.uberinternal.com'

05 Sep 2017

b'Coinbase' disclosed a bug submitted by b'tejpratap' 
b'Captcha Bypass in Coinbase SignUp Form'

05 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'flashdisk' 
b'first name and last name restrictions bypass'

05 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'localhost31337' 
b'Password reset token issue'

05 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'superman85' 
b'Bypass email verification when register new account'

04 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'nihadx95' 
b'Password reset token issue '

04 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'nihadx95' 
b'Error the message with already e-mail '

04 Sep 2017

b'Mail.Ru' disclosed a bug submitted by b'0xradi' 
b'BruteForce Any [My.com] Account Credentials.'

04 Sep 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'dilip_prakash' 
b'Password reset token issue'

04 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'elliots' 
b'No alert in verify email address with wrong input'

03 Sep 2017

b'HackerOne' disclosed a bug submitted by b'japzdivino' 
b'IDOR on HackerOne Feedback Review'

02 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'pr4th4m' 
b'Improper error message'

01 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'princesinha' 
b'Profile fields validation bypass'

01 Sep 2017

b'Rockstar Games' disclosed a bug submitted by b'injexxsor' 
b'Reflected XSS via Double Encoding'

01 Sep 2017

b'Zomato' disclosed a bug submitted by b'b1t' 
b'Length extension attack leading to HTML injection'

01 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'amir0ezat' 
b'clickjacking at http://mailboxes.legalrobot-uat.com/'

01 Sep 2017

b'RubyGems' disclosed a bug submitted by b'mame' 
b'No limit of summary length allows Denail of Service'

31 Aug 2017

1 ... 504 505 506 507 508 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM