Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby' disclosed a bug submitted by b'haquaman' 
b'Ruby 2.4.1 has "Stack consistency error" and aborts when processing return statement within a case statement'

24 Sep 2017

b'Slack' disclosed a bug submitted by b'co3k' 
b'The Custom Emoji Page has a Reflected XSS'

24 Sep 2017

b'Mixmax' disclosed a bug submitted by b'aliashber1' 
b'app.mixmax.com Information Discloure on cal.mixmax.com and Not Signing out after Removing information grant access from Google'

24 Sep 2017

b'Starbucks' disclosed a bug submitted by b'ven0ms' 
b'Possible SOP bypass in www.starbucks.com due to insecure crossdomain.xml'

23 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'pahan123' 
b'Missing homograph filter character'

22 Sep 2017

b'Shopify' disclosed a bug submitted by b'floyd' 
b'SVG Server Side Request Forgery (SSRF)'

22 Sep 2017

b'Ruby' disclosed a bug submitted by b'aerodudrizzt' 
b'sprintf combined format string attack'

22 Sep 2017

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured Elasticsearch Instance'

21 Sep 2017

b'The Internet' disclosed a bug submitted by b'joernchen' 
b'RCE via ssh:// URIs in multiple VCS '

21 Sep 2017

b'GitLab' disclosed a bug submitted by b'rpearl' 
b'all private tokens are leaked to an unauthenticated attacker'

21 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'ihusnain49' 
b'Password Complexity '

21 Sep 2017

b'Whisper' disclosed a bug submitted by b'hackedbrain' 
b'Open Redirection Found in users.whisper.sh'

21 Sep 2017

b'Zendesk' disclosed a bug submitted by b'intidc' 
b'Twitter SSO allows unverified e-mail registration, leads to Slack and social media hijacks'

21 Sep 2017

b'GitLab' disclosed a bug submitted by b'intidc' 
b"Access to GitLab's Slack by abusing issue creation from e-mail"

21 Sep 2017

b'Brave Software' disclosed a bug submitted by b'apapedulimu' 
b'Homograph Attack Bypass [ Tested on Linux & Windows ]'

21 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'jacky_boy' 
b'Homo graphs attack '

20 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'lawrenceamer' 
b'[api.data.gov] Leak Valid API With out Verification -'

20 Sep 2017

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'XSS ? ???????? ???????'

20 Sep 2017

b'VK.com' disclosed a bug submitted by b'zhumarin' 
b'????????? ????? ????? ????????? ??????????'

20 Sep 2017

b'VK.com' disclosed a bug submitted by b'flyink' 
b'XSS ? ???????????? ?? ????? ?????????? '

20 Sep 2017

1 ... 510 511 512 513 514 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM