Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'myst404' 
b'Stored XSS in Adress Book (starbucks.com/account/profile)'

31 May 2017

b'VK.com' disclosed a bug submitted by b'abr1k0s' 
b'CSRF ? ????????? ????????? ???????+framing , ?????????? ? ?????????????? 2fa'

31 May 2017

b'Mixmax' disclosed a bug submitted by b'z3t' 
b'Possible Subdomain Takeover'

31 May 2017

b'Mixmax' disclosed a bug submitted by b'jin' 
b'Subdomain takeover (sales.mixmax.com)'

31 May 2017

b'Instacart' disclosed a bug submitted by b'ak1t4' 
b'Reverse Tab-nabbing at www.instacart.com/store/partner_recipe?recipe_url='

30 May 2017

b'Instacart' disclosed a bug submitted by b'ak1t4' 
b'XSS at in instacart.com/store/partner_recipe'

30 May 2017

b'Shopify' disclosed a bug submitted by b'bored-engineer' 
b'XSS on any Shopify shop via abuse of the HTML5 structured clone algorithm in postMessage listener on "/:id/digital_wallets/dialog"'

30 May 2017

b'PHP (IBB)' disclosed a bug submitted by b'rc0r' 
b'Heap overflow caused by type confusion vulnerability in merge_param()'

30 May 2017

b'PHP (IBB)' disclosed a bug submitted by b'rc0r' 
b'Buffer overflow in HTTP parse_hostinfo(), parse_userinfo() and parse_scheme()'

30 May 2017

b'shopify-scripts' disclosed a bug submitted by b'avisaven' 
b'Heap Overflow in fiber_switch triggered from Fiber.transfer'

30 May 2017

b'shopify-scripts' disclosed a bug submitted by b'avisaven' 
b'OP_SCALL in LHS of a OP_ASGN resulting in arbitrary memory write'

30 May 2017

b'Teradici' disclosed a bug submitted by b'imxx' 
b'Weak Password Policy on techsupport.teradici.com'

29 May 2017

b'Teradici' disclosed a bug submitted by b'inlovewithaghost' 
b'Weak password requirement on techsupport.teradici.com '

29 May 2017

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Reflected XSS in <any>.myshopify.com through theme preview'

29 May 2017

b'Perl (IBB)' disclosed a bug submitted by b'geeknik' 
b'read outside of buffer (heap buffer overflow) in S_regmatch - regexec.c:6057'

28 May 2017

b'Perl (IBB)' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (READ of size 11) in Perl 5.25.x'

28 May 2017

b'PHP (IBB)' disclosed a bug submitted by b'hanno' 
b'Out of bounds memory read in unserialize()'

28 May 2017

b'Cuvva' disclosed a bug submitted by b'leet-boy' 
b'Missing rate limit on https://underwriter.partner.cuvva.com/login/verify'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'streaak' 
b'Missing Rate limiting on https://underwriter.partner.cuvva.com/login'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'bhumish' 
b'Verification code for Underwriter dashboard can be brute-forced'

27 May 2017

1 ... 535 536 537 538 539 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM