Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Boozt Fashion AB' disclosed a bug submitted by b'stefanofindsbugs' 
b'Reflected XSS on www.boozt.com'

01 Aug 2017

b'WakaTime' disclosed a bug submitted by b'tikoo_sahil' 
b"Bypassing Access control, changing owner's name in a private leaderboard"

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'goodhackonly' 
b'Missing link to TOTP manual enroll option'

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'goodhackonly' 
b'Enhancement: email confirmation for 2FA recovery'

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'showing Joined time function design issue '

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'japzdivino' 
b'2FA Error Handling on Google Authenticator'

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'smziaurrashid' 
b'Lack of input validation in e-mail & user name, job title, company name field'

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'dilip_prakash' 
b'Subdomain misconfiguration [mail.legalrobot.com]'

31 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'3xp1r3_pr1nc3' 
b'Big XSS vulnerability!'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'krazyhack3r' 
b'LUCKY13 (CVE-2013-0169) effects legalrobot.com'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'c0defir3' 
b'SSL : breach compression attack (CVE-2013-3587) effects legalrobot.com'

30 Jul 2017

b'WakaTime' disclosed a bug submitted by b'c0defir3' 
b'Failure to check password history'

30 Jul 2017

b'OLX' disclosed a bug submitted by b'tsug0d' 
b'Stored XSS in buy topup OLX Gold Credits '

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'No notification on change password feature'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'reydd' 
b'[Cross-domain Referrer leakage] Password reset token leakage via referrer'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'Meta characters are not filtered into full name on profile page'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b"Pages don't render in old browsers like IE11"

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'myster' 
b'Token leakage by referrer header & analytics'

30 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'[New Feature] Password history check'

30 Jul 2017

b'Dashlane' disclosed a bug submitted by b'corb3nik' 
b'Throttling Bypass - ws1.dashlane.com'

30 Jul 2017

1 ... 526 527 528 529 530 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM