Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'fa1rlight' 
b'Stored XSS with CRLF injection via post message to user feed'

18 Sep 2017

b'Rockstar Games' disclosed a bug submitted by b'0x0luke' 
b'Stored XSS on member post feed'

18 Sep 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'niko00' 
b'booztfashion.com URL should HTTPS'

18 Sep 2017

b'Tor' disclosed a bug submitted by b'janu123' 
b'Sql query disclosure,'

18 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'betterknowme' 
b'UX: JS error on Password Safety link'

17 Sep 2017

b'Automattic' disclosed a bug submitted by b'isaeva' 
b'https://secure.gravatar.com'

17 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'd4rk_g1rl' 
b'Homograph IDNs displayed in Description'

16 Sep 2017

b'Yelp' disclosed a bug submitted by b'coder13' 
b'Verification of email addresses possible through https://www.yelp.com/signup/facebook'

16 Sep 2017

b'Weblate' disclosed a bug submitted by b'kaamakya' 
b'DKIM records not present, Email Hijacking is possible.....'

16 Sep 2017

b'Weblate' disclosed a bug submitted by b'alyanwarr' 
b'Missing Restriction On String Size'

16 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov'

16 Sep 2017

b'Nextcloud' disclosed a bug submitted by b'babayaga_' 
b'IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email '

16 Sep 2017

b'Perl (IBB)' disclosed a bug submitted by b'mipu94' 
b'Use-after-free in XML::LibXML::Node::replaceChild'

16 Sep 2017

b'Automattic' disclosed a bug submitted by b'slavco' 
b'woocommerce - prevent_caching() bug / bypass'

16 Sep 2017

b'Cuvva' disclosed a bug submitted by b'leet-boy' 
b"Insecure Direct Object Reference (IDOR) Allowing me to claim other user's photos (driving license and selfies) as mine"

15 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)'

15 Sep 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs' 
b'HTML injection (with XSS possible) on the https://www.data.gov/issue/ using media_url attribute'

15 Sep 2017

b'Automattic' disclosed a bug submitted by b'slavco' 
b'Unauthenticated RCE in Vaultpress'

15 Sep 2017

b'Ruby' disclosed a bug submitted by b'mame' 
b'Escape sequence injection vulnerability in WEBrick BasicAuth'

15 Sep 2017

b'Legal Robot' disclosed a bug submitted by b'hulskr' 
b'Profile fields validation mismatch'

15 Sep 2017

1 ... 515 516 517 518 519 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM