REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'GitLab'
disclosed a bug submitted by
b'rpearl'
b'all private tokens are leaked to an unauthenticated attacker'
21 Sep 2017
b'Legal Robot'
disclosed a bug submitted by
b'ihusnain49'
b'Password Complexity '
21 Sep 2017
b'Whisper'
disclosed a bug submitted by
b'hackedbrain'
b'Open Redirection Found in users.whisper.sh'
21 Sep 2017
b'Zendesk'
disclosed a bug submitted by
b'intidc'
b'Twitter SSO allows unverified e-mail registration, leads to Slack and social media hijacks'
21 Sep 2017
b'GitLab'
disclosed a bug submitted by
b'intidc'
b"Access to GitLab's Slack by abusing issue creation from e-mail"
21 Sep 2017
b'Brave Software'
disclosed a bug submitted by
b'apapedulimu'
b'Homograph Attack Bypass [ Tested on Linux & Windows ]'
21 Sep 2017
b'TTS Bug Bounty'
disclosed a bug submitted by
b'jacky_boy'
b'Homo graphs attack '
20 Sep 2017
b'TTS Bug Bounty'
disclosed a bug submitted by
b'lawrenceamer'
b'[api.data.gov] Leak Valid API With out Verification -'
20 Sep 2017
b'VK.com'
disclosed a bug submitted by
b'pisarenko'
b'XSS ? ???????? ???????'
20 Sep 2017
b'VK.com'
disclosed a bug submitted by
b'zhumarin'
b'????????? ????? ????? ????????? ??????????'
20 Sep 2017
b'VK.com'
disclosed a bug submitted by
b'flyink'
b'XSS ? ???????????? ?? ????? ?????????? '
20 Sep 2017
b'Vimeo'
disclosed a bug submitted by
b'pantherdefence'
b'Download Any Password Protected / Restricted Videos With Any Privacy'
20 Sep 2017
b'VK.com'
disclosed a bug submitted by
b'pisarenko'
b'???????? ?????? ?? ????? ????? ???????? vk.cc'
20 Sep 2017
b'Legal Robot'
disclosed a bug submitted by
b'dr_hack'
b'External links to be in HTTP'
20 Sep 2017
b'Legal Robot'
disclosed a bug submitted by
b'nihad_rekany'
b'Failed OutLink on Terms of Service'
20 Sep 2017
b'The Internet'
disclosed a bug submitted by
b'dor1s'
b'Race Conditions in OAuth 2 API implementations'
19 Sep 2017
b'Zomato'
disclosed a bug submitted by
b'nbsp'
b"Unauthorized update of merchants' information via /php/merchant_details.php"
19 Sep 2017
b'Zomato'
disclosed a bug submitted by
b'gerben_javado'
b'[www.zomato.com] Union SQLi + Waf Bypass'
19 Sep 2017
b'Rockstar Games'
disclosed a bug submitted by
b'fa1rlight'
b'Stored XSS with CRLF injection via post message to user feed'
18 Sep 2017
b'Rockstar Games'
disclosed a bug submitted by
b'0x0luke'
b'Stored XSS on member post feed'
18 Sep 2017
1
...
538
539
540
541
542
...
765
BY DENIS WERNER - @NOBBD -
IMPRESSUM