Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Legal Robot' disclosed a bug submitted by b'4w3' 
b'Exposes a series of other private credentials'

13 Nov 2017

b'WordPress' disclosed a bug submitted by b'slavco' 
b'WordPress DB Class, bad implementation of prepare method guides to sqli and information disclosure'

13 Nov 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'twicedi' 
b'Privilege escalation in the client impersonation functionality'

13 Nov 2017

b'Automattic' disclosed a bug submitted by b'ysx' 
b'[app.simplenote.com] Stored XSS via Markdown SVG filter bypass'

12 Nov 2017

b'Slack' disclosed a bug submitted by b'cablej' 
b'Race Condition in account survey'

12 Nov 2017

b'Twitter' disclosed a bug submitted by b'csanuragjain' 
b'Opportunity to obtain private tweets through search widget preview caches'

11 Nov 2017

b'Phabricator' disclosed a bug submitted by b'pnig0s' 
b'Command injection on Phabricator instance with an evil hg branch name'

11 Nov 2017

b'New Relic' disclosed a bug submitted by b'everardo' 
b'Unvalidated redirect in alerts.newrelic.com/auth/newrelic?origin='

10 Nov 2017

b'New Relic' disclosed a bug submitted by b'guifre' 
b'SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability'

10 Nov 2017

b'New Relic' disclosed a bug submitted by b'itsaj3' 
b'Sub domain issues.'

10 Nov 2017

b'New Relic' disclosed a bug submitted by b'tsug0d' 
b'Stored XSS on BillingCountry parameter'

10 Nov 2017

b'Pornhub' disclosed a bug submitted by b'malacupa' 
b'Possibility to insert stored XSS inside <img> tag'

10 Nov 2017

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'Stored XSS on profile page via Steam display name'

10 Nov 2017

b'Shopify' disclosed a bug submitted by b'iron_fist' 
b'Self-XSS in password reset functionality'

10 Nov 2017

b'Legal Robot' disclosed a bug submitted by b'9itrsec' 
b'Clickjacking in Legalrobot app'

10 Nov 2017

b'bitwarden' disclosed a bug submitted by b'b3nac' 
b'Vulnerable exported broadcast receiver'

10 Nov 2017

b'Legal Robot' disclosed a bug submitted by b'leovin' 
b'Broken links for stale domains may be leveraged for Phishing, Misinformation, Defaming'

10 Nov 2017

b'Legal Robot' disclosed a bug submitted by b'fstudio' 
b'Improper Implementation of Password strength checker'

10 Nov 2017

b'Yelp' disclosed a bug submitted by b'samidrif' 
b'Leaking sensitive information lead to compromise employer API keys'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'pkkothawade' 
b'Yelp.com is vulnerable to SWEET32 attack'

09 Nov 2017

1 ... 514 515 516 517 518 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM