Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Gratipay' disclosed a bug submitted by b'b3nac' 
b'Possible user session hijack by invalid HTTPS certificate on inside.gratipay.com domain'

21 Jun 2017

b'HackerOne' disclosed a bug submitted by b'ak1t4' 
b'Subdomain takeover #3 at info.hacker.one'

21 Jun 2017

b'HackerOne' disclosed a bug submitted by b'ak1t4' 
b'Subdomain takeover #4 at info.hacker.one'

21 Jun 2017

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pahan1234' 
b'Directory Disclose,Email Disclose Zendmail vulnerability'

21 Jun 2017

b'OLX' disclosed a bug submitted by b'jaypogzz' 
b'Server Version Of https://www.olx.ph/'

20 Jun 2017

b'OLX' disclosed a bug submitted by b'piyushsonikumar1671' 
b' OLX is vulnerable to clickjaking'

20 Jun 2017

b'Urban Dictionary' disclosed a bug submitted by b'tcpiplab' 
b'Session replay vulnerability in www.urbandictionary.com'

20 Jun 2017

b'Weblate' disclosed a bug submitted by b'rammarj' 
b'Improper validation of unicode characters'

19 Jun 2017

b'Gratipay' disclosed a bug submitted by b'4w3' 
b'CSP Policy Bypass and javascript execution Still Not Fixed'

19 Jun 2017

b'Discourse' disclosed a bug submitted by b'marpo' 
b'SSRF in upload IMG through URL'

18 Jun 2017

b'Gratipay' disclosed a bug submitted by b'athuljayaram' 
b'CSP Policy Bypass and javascript execution'

18 Jun 2017

b'Zomato' disclosed a bug submitted by b'dsopas' 
b'Reflected XSS on business-blog.zomato.com - Part 2'

18 Jun 2017

b'Zomato' disclosed a bug submitted by b'dsopas' 
b'Reflected XSS on business-blog.zomato.com - Part I'

18 Jun 2017

b'VK.com' disclosed a bug submitted by b'lincoln9932' 
b'???????? ?? ????? ?????? ???????????? ?? ??? ?????, ???? ?? ???????? ?? ??????. https://vk.com/al_video.php'

17 Jun 2017

b'Zomato' disclosed a bug submitted by b'iampwned' 
b'XSS in flashmediaelement.swf (business-blog.zomato.com)'

17 Jun 2017

b'Zomato' disclosed a bug submitted by b'iampwned' 
b'MailPoet Newsletters <= 2.7.2 - Authenticated Reflected Cross-Site Scripting (XSS)'

17 Jun 2017

b'Udemy' disclosed a bug submitted by b'n0rb3r7' 
b'Completed Compromise & Source Code Disclosure via Exposed Jenkins Dashboard at https://jenkins101.udemy.com'

17 Jun 2017

b'Gratipay' disclosed a bug submitted by b'h1_gnost' 
b'Email Spoofing'

17 Jun 2017

b'Discourse' disclosed a bug submitted by b'arkadiyt' 
b'Any authenticated user can download full list of users, including email'

17 Jun 2017

b'Mixmax' disclosed a bug submitted by b'syntaxerror' 
b'Privilege escalation-User who does not have access is able to add notes to the contact'

16 Jun 2017

1 ... 528 529 530 531 532 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM