Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WordPress' disclosed a bug submitted by b'skansing' 
b'Wordpress 4.7 - CSRF -> HTTP SSRF any private ip:port and basic-auth'

20 Nov 2017

b'Twitter' disclosed a bug submitted by b'segumarc' 
b'Listing of Amazon S3 Bucket accessible to any amazon authenticated user (metrics.pscp.tv)'

19 Nov 2017

b'WordPress' disclosed a bug submitted by b'sikic' 
b'Authenticated Cross-site Scripting in Template Name'

18 Nov 2017

b'Slack' disclosed a bug submitted by b'kamikaze' 
b'Bypass two-factor authentication'

18 Nov 2017

b'Tor' disclosed a bug submitted by b'closer' 
b'Access to local file system using javascript'

18 Nov 2017

b'HackerOne' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Pending member invitations are not revoked on program name change'

18 Nov 2017

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b"GraphQL sessions aren't immediately invalidated when user password is changed"

17 Nov 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'muskecan' 
b"2FA bypass - confirmation tokens don't expire"

17 Nov 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'drough' 
b'Error Page Content Spoofing or Text Injection'

17 Nov 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'streaak2' 
b'CSRF in generating a new Personal Key'

17 Nov 2017

b'Weblate' disclosed a bug submitted by b'110110110' 
b'Improper validation of unicode characters '

17 Nov 2017

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'jouko' 
b'www.drivegrab.com SQL injection'

17 Nov 2017

b'HackerOne' disclosed a bug submitted by b'clarckowen_' 
b'Issue with password change in Disabled Account'

16 Nov 2017

b'HackerOne' disclosed a bug submitted by b'edio' 
b'Additional bypass allows SSRF for internal netblocks'

16 Nov 2017

b'Automattic' disclosed a bug submitted by b'dutchgraa' 
b'Persistent Cross-Site Scripting in WooCommerce WordPress plugin'

16 Nov 2017

b'WordPress' disclosed a bug submitted by b'dutchgraa' 
b'WordPress core - Denial of Service via Cross Site Request Forgery'

16 Nov 2017

b'Aspen' disclosed a bug submitted by b'kalyani64' 
b"Session does't get expired after changing the password in https://readthedocs.org"

16 Nov 2017

b'HackerOne' disclosed a bug submitted by b'vulnholic' 
b'Private Program all members disclosed '

16 Nov 2017

b'Infogram' disclosed a bug submitted by b'pinoywhitehat' 
b'Bypass insecure password validation'

16 Nov 2017

b'IRCCloud' disclosed a bug submitted by b'bagipro' 
b'[IRCCloud Android] Theft of arbitrary files leading to token leakage'

15 Nov 2017

1 ... 529 530 531 532 533 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM