Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Bitvise' disclosed a bug submitted by b'tanzanian_hacker1' 
b'The POODLE attack (SSLv3 supported)'

30 Jul 2017

b'Automattic' disclosed a bug submitted by b'neex' 
b'SSRF and local file disclosure in https://wordpress.com/media/videos/ via FFmpeg HLS processing'

29 Jul 2017

b'concrete5' disclosed a bug submitted by b'bl4de' 
b'Stored XSS in Pages SEO dialog Name field (concrete5 8.1.0)'

27 Jul 2017

b'Starbucks' disclosed a bug submitted by b'rbcafe' 
b'[connect.teavana.com] Open Redirect and abuse of connect.teavana.com'

27 Jul 2017

b'HackerOne' disclosed a bug submitted by b'inhibitor181' 
b"Reading redacted data via hackbot's answers"

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'xpathmaster' 
b'Git available containing passwords. '

27 Jul 2017

b'Greenhouse.io' disclosed a bug submitted by b'ahmed_ezzat_nasr' 
b'Content Spoofing on link.greenhouse.io'

27 Jul 2017

b'Weblate' disclosed a bug submitted by b'blake12356' 
b'The username of an account can be ..'

27 Jul 2017

b'Weblate' disclosed a bug submitted by b'blake12356' 
b'No filteration of null characters in name field'

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'koshti25' 
b'Broken Authentication and Session Management(Session Fixation)'

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'nightwatch-cybersecurity' 
b'Android app does not use SSL for login'

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'abdulwahab' 
b'Cookie Misconfiguration'

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'sfsecurityfirst' 
b'ADB Backup is enabled within AndroidManifest'

27 Jul 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'm7mdharoun' 
b'Email spoofing at booztlet.com'

27 Jul 2017

b'Maximum' disclosed a bug submitted by b'kuton' 
b'Open redirect on https://werkenbijdefensie.nl/'

27 Jul 2017

b'Twitter' disclosed a bug submitted by b'joshbrodienz' 
b'XXE on sms-be-vip.twitter.com in SXMP Processor'

26 Jul 2017

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'CSRF on Periscope Web OAuth authorization endpoint '

26 Jul 2017

b'WordPress' disclosed a bug submitted by b'jon_bottarini' 
b'Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter '

26 Jul 2017

b'Keybase' disclosed a bug submitted by b'jupenur' 
b'Universal Cross-Site Scripting in Keybase Chrome extension'

26 Jul 2017

b'Starbucks' disclosed a bug submitted by b'an0n-j' 
b'Reflected XSS in openapi.starbucks.com /searchasyoutype/v1/search?x-api-key='

25 Jul 2017

1 ... 527 528 529 530 531 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM