Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Yelp' disclosed a bug submitted by b'edio' 
b"Firefly's verify_access_token() function does a byte-by-byte comparison of HMAC values."

10 Jul 2017

b'Pornhub' disclosed a bug submitted by b'kenziy' 
b'pornhub.com/user/welcome/basicinfo nickname field is vulnerable on xss'

10 Jul 2017

b'WakaTime' disclosed a bug submitted by b'abhiram' 
b'by pass rate limit exceed '

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'karthic' 
b'Usernames ending in .json are not restricted'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'karthic' 
b'x-xss protection header is not set in response header'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'yodha' 
b'Lack of CSRF token validation at server side'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'd4rk_g1rl' 
b'CSP "script-src" includes "unsafe-inline" in https://gratipay.com'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'a5tronaut' 
b'prevent content spoofing on /~username/emails/verify.html'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'mkd1r' 
b'SSl Weak Ciphers'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'yodha' 
b'Insecure Transportation Security Protocol Supported (TLS 1.0)'

10 Jul 2017

b'Gratipay' disclosed a bug submitted by b'tanvi07' 
b'self cross site scripting'

10 Jul 2017

b'WakaTime' disclosed a bug submitted by b'anurag98' 
b'Session Duplication due to Broken Access Control'

10 Jul 2017

b'VK.com' disclosed a bug submitted by b'lincoln9932' 
b'?????????? ???????????, ??????? ???????????? ?????-???? ???????? ? ??. '

09 Jul 2017

b'VK.com' disclosed a bug submitted by b'lincoln9932' 
b'CSRF ?? ????? ????? ??????????.'

09 Jul 2017

b'ICQ' disclosed a bug submitted by b'norver' 
b'????????: https://hackerone.com/reports/219171 (?????? ? ????????, ????? ????? ??????)'

09 Jul 2017

b'WakaTime' disclosed a bug submitted by b'saikiran-10097' 
b'Blocking users to sign up on the site'

08 Jul 2017

b'Informatica' disclosed a bug submitted by b'albinowax' 
b'[alpha.informatica.com] Expensive DOMXSS'

08 Jul 2017

b'Greenhouse.io' disclosed a bug submitted by b'cyneox' 
b'Open Redirect in <customer>.greenhouse.io'

08 Jul 2017

b'Pornhub' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS in the any user profile using website link'

07 Jul 2017

b'WakaTime' disclosed a bug submitted by b'anurag98' 
b'Session Duplication due to Improper Validation'

07 Jul 2017

1 ... 521 522 523 524 525 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM