Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'etd' 
b'Privilege escalation - Normal user can somehow make admin to delete shared folders'

20 May 2017

b'Weblate' disclosed a bug submitted by b'streaak' 
b'Open SMTP port can let anyone send email from mail.chihar.com'

20 May 2017

b'WordPress' disclosed a bug submitted by b'codertom' 
b'XSS in the search bar of mercantile.wordpress.org'

20 May 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'linkks' 
b'XSS'

20 May 2017

b'Trello' disclosed a bug submitted by b'obi95' 
b'XML entity expansion using svg file '

19 May 2017

b'Weblate' disclosed a bug submitted by b'sarlis' 
b'You can simply just use passwords that simply are as 123456'

19 May 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'simongurney' 
b'Expired SSL certificate'

19 May 2017

b'Zomato' disclosed a bug submitted by b'glc' 
b'Amazon S3 bucket misconfiguration (share)'

18 May 2017

b'Zomato' disclosed a bug submitted by b'top' 
b'CSS'

18 May 2017

b'Zomato' disclosed a bug submitted by b'benoculars' 
b'Clickjacking login page of http://book.zomato.com/'

18 May 2017

b'Zomato' disclosed a bug submitted by b'roshanpty' 
b'Unvalidated redirect on user profile website'

18 May 2017

b'Zomato' disclosed a bug submitted by b'dhanunjaya' 
b'Visibility Robots.txt file'

18 May 2017

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te' 
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te' 
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017

b'Nextcloud' disclosed a bug submitted by b'cloudyvirus' 
b'Email Spoofing Vulnerability from nextcloud.'

18 May 2017

b'Gratipay' disclosed a bug submitted by b'footstep' 
b'nginx version disclosure on downloads.gratipay.com'

18 May 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b"Null Password - Setting a new password doesn't check for empty spaces"

18 May 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Access to completion page without performing any action'

18 May 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Setting a password with a single character'

18 May 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Running 2 accounts with a single email'

18 May 2017

1 ... 539 540 541 542 543 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM