Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Trello' disclosed a bug submitted by b'sireeeeens' 
b'A CRLF injection into the redirect URL of https://trello.com/1/authorize can be used to cause a denial of service when later redirected to'

30 Aug 2017

b'Quora' disclosed a bug submitted by b'bagipro' 
b'[Quora Android] Possible to steal arbitrary files from mobile device'

30 Aug 2017

b'shopify-scripts' disclosed a bug submitted by b'an0n-j' 
b'Clearing , Shifting and Pop Value from Frozen Array '

30 Aug 2017

b'VK.com' disclosed a bug submitted by b'zhumarin' 
b'api.vk.com ?????? ? ????? HTML ???????????????? ???????? vk.com'

30 Aug 2017

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'HackerOne reports escalation to JIRA is CSRF vulnerable'

30 Aug 2017

b'WakaTime' disclosed a bug submitted by b'safwat' 
b'Logout CSRF'

29 Aug 2017

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Stealing contact form data on www.hackerone.com using Marketo Forms XSS with postMessage frame-jumping and jQuery-JSONP'

29 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'baseballislife' 
b'S3 ACL misconfiguration'

29 Aug 2017

b'Udemy' disclosed a bug submitted by b'firestone' 
b'Weak Password'

28 Aug 2017

b'Udemy' disclosed a bug submitted by b'hdarji' 
b'CSRF Token Design Flaw'

28 Aug 2017

b'Udemy' disclosed a bug submitted by b'alirazzaq' 
b'No password length restriction'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'pr4th4m' 
b'Invalid Email Verification'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'1dashunderscore' 
b'design issue exists on login page '

28 Aug 2017

b'Coinbase' disclosed a bug submitted by b'dark_heaven' 
b'CSRF bug on password change'

28 Aug 2017

b'WordPress' disclosed a bug submitted by b'giantfire' 
b'Clickjacking - https://mercantile.wordpress.org/'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'l337hulskar' 
b'I cant login to my account'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'l337hulskar' 
b'Coding error ! '

28 Aug 2017

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'Stored XSS in profile activity feed messages'

28 Aug 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'bobrov' 
b'[dev-unifi-go.ubnt.com] Insecure CORS, Stealing Cookies'

28 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'CSP script-src includes "unsafe-inline"'

28 Aug 2017

1 ... 526 527 528 529 530 ... 747

BY DENIS WERNER - @NOBBD - IMPRESSUM