Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'txt3rob' 
b'XSS on pornhubselect.com'

26 Jun 2017

b'arxius' disclosed a bug submitted by b'isrsahilmk' 
b'No SPF/DKIM/DMARC Record for lfil.es'

26 Jun 2017

b'Zomato' disclosed a bug submitted by b'harry_mg' 
b'Reflected XSS in Zomato Mobile - category parameter'

26 Jun 2017

b'Dashlane' disclosed a bug submitted by b'kiraak-boy' 
b'Missing Access Control(IDOR) To Know LinkedAccounts '

26 Jun 2017

b'arxius' disclosed a bug submitted by b'cdl' 
b'Local File Disclosure via ffmpeg '

25 Jun 2017

b'Badoo' disclosed a bug submitted by b'alvares97' 
b'Arbitrary modification value "session" (Cookie) in badoo.com'

25 Jun 2017

b'Slack' disclosed a bug submitted by b'boniao_norwin' 
b'"a stored xss issue in share post menu"'

25 Jun 2017

b'Slack' disclosed a bug submitted by b'boniao_norwin' 
b'a stored xss issue in https://files.slack.com'

25 Jun 2017

b'WordPress' disclosed a bug submitted by b'hasanexpert' 
b'Vulnerable to clickjacking'

24 Jun 2017

b'Gratipay' disclosed a bug submitted by b'mr_unknown' 
b'Possible User Session Hijack using Invalid HTTPS certificate on inside.gratipay.com domain'

24 Jun 2017

b'Informatica' disclosed a bug submitted by b's_p_q_r' 
b'[kb.informatica.com] DOM based XSS in the bindBreadCrumb function'

24 Jun 2017

b'VK.com' disclosed a bug submitted by b'neex' 
b'local file disclosure via FFmpeg hls processing'

24 Jun 2017

b'Rockstar Games' disclosed a bug submitted by b'zuhnny1' 
b'Control characters incorrectly handled on Crew Status Update'

23 Jun 2017

b'Mixmax' disclosed a bug submitted by b'brdoors4' 
b'Design issue with webhook (several) notifications on mixmax.com'

23 Jun 2017

b'shopify-scripts' disclosed a bug submitted by b'titanous' 
b'Null pointer dereference with send/method_missing'

23 Jun 2017

b'Coinbase' disclosed a bug submitted by b'dark_heaven' 
b'Open redirect on sign in '

23 Jun 2017

b'Shopify' disclosed a bug submitted by b'edio' 
b'ShopifyAPI is vulnerable to timing attacks.'

23 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahsantahir' 
b'Stored cross site scripting (XSS) vulnerability on a DoD website'

23 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahsantahir' 
b'Cross-site scripting (XSS) vulnerability on a DoD website'

23 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tcpiplab' 
b'Information disclosure vulnerability on a DoD website'

23 Jun 2017

1 ... 537 538 539 540 541 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM