Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Stealing contact form data on www.hackerone.com using Marketo Forms XSS with postMessage frame-jumping and jQuery-JSONP'

29 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'baseballislife' 
b'S3 ACL misconfiguration'

29 Aug 2017

b'Udemy' disclosed a bug submitted by b'firestone' 
b'Weak Password'

28 Aug 2017

b'Udemy' disclosed a bug submitted by b'hdarji' 
b'CSRF Token Design Flaw'

28 Aug 2017

b'Udemy' disclosed a bug submitted by b'alirazzaq' 
b'No password length restriction'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'pr4th4m' 
b'Invalid Email Verification'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'1dashunderscore' 
b'design issue exists on login page '

28 Aug 2017

b'Coinbase' disclosed a bug submitted by b'dark_heaven' 
b'CSRF bug on password change'

28 Aug 2017

b'WordPress' disclosed a bug submitted by b'giantfire' 
b'Clickjacking - https://mercantile.wordpress.org/'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'l337hulskar' 
b'I cant login to my account'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'l337hulskar' 
b'Coding error ! '

28 Aug 2017

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'Stored XSS in profile activity feed messages'

28 Aug 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'bobrov' 
b'[dev-unifi-go.ubnt.com] Insecure CORS, Stealing Cookies'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'CSP script-src includes "unsafe-inline"'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'r0h17' 
b'Password Policy Bypass'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'cyber-tiger' 
b'Insufficient Security Configurability-Weak Registration Implementation-Allows Disposable Email Addresses'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'mansouri_badis' 
b'News Feed Detected '

27 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'hrj' 
b'CSRF Issue'

27 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'arnonymous' 
b'The websocket traffic is not secure enough'

27 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'305' 
b'Information disclosure'

27 Aug 2017

1 ... 517 518 519 520 521 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM