Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'New Relic' disclosed a bug submitted by b'lulliii' 
b'Moniter Failed Sends too many emails'

11 Oct 2017

b'New Relic' disclosed a bug submitted by b'tungpun' 
b'Internal Ports Scanning via Blind SSRF'

11 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'h1s0k4' 
b'Legal Robot AWS S3 Bucket Directory Listing'

11 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'chintan' 
b'cross site web socket hijacking'

11 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'masood_chaudhry' 
b'Information Discloser'

11 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'firestone' 
b'Unable to change profile picture'

10 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'ashishag29' 
b'[UX] Notify user on likely email address typo'

10 Oct 2017

b'Rockstar Games' disclosed a bug submitted by b'0x0luke' 
b'Stored XSS on support.rockstargames.com'

10 Oct 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'grampae' 
b'Directory traversal at https://nightly.ubnt.com'

10 Oct 2017

b'YouPorn' disclosed a bug submitted by b'platinum1933' 
b'youporn email notification enable/disable and newsletter '

09 Oct 2017

b'Mail.Ru' disclosed a bug submitted by b'ruvlol' 
b'XSS in biz.mail.ru/error'

09 Oct 2017

b'GitLab' disclosed a bug submitted by b'naure' 
b'CSRF-Token leak by request forgery'

09 Oct 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'tripwire' 
b'Exposed API-key allows to control nightly builds of firmwares (????????? & ????????)'

09 Oct 2017

b'Imgur' disclosed a bug submitted by b'logue' 
b'Reflected XSS in m.imgur.com'

07 Oct 2017

b'WakaTime' disclosed a bug submitted by b'flex0geek' 
b'Can link to websites from profile'

07 Oct 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Running 2 accounts with a single email [Part 2]'

07 Oct 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Reset password more than once with a reset link #2'

07 Oct 2017

b'WakaTime' disclosed a bug submitted by b'flex0geek' 
b'password token validation'

07 Oct 2017

b'Snapchat' disclosed a bug submitted by b'ysx' 
b'Subdomain Takeover via Unclaimed WordPress site'

06 Oct 2017

b'Unikrn' disclosed a bug submitted by b'sp1d3rs' 
b'Persistent XSS found on bin.pinion.gg due to outdated FlowPlayer SWF file with Remote File Inclusion vulnerability.'

05 Oct 2017

1 ... 506 507 508 509 510 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM