Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured Kibana/Elasticsearch instance'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'filedeletor1' 
b'Subdomain Takeover at http://gameday.websummit.net'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'glc' 
b'Subdomain take over signup.websummit'

29 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'jimmyjohns' 
b'SQL Injection on /webApp/sijoitustalousuk email-parameter + potential lack of CSRF Token (viestinta.lahitapiola.fi)'

28 Jan 2017

b'Imgur' disclosed a bug submitted by b'i1ackerone_' 
b'Stored xss in ALBUM DESCRIPTION '

27 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Wordpress 4.7.1'

27 Jan 2017

b'Open-Xchange' disclosed a bug submitted by b'lukasreschke' 
b'Reflected Cross-Site Scripting due to vulnerable Flash component (Flashmediaelement.swf)'

27 Jan 2017

b'Starbucks' disclosed a bug submitted by b'cj862530' 
b'Starbucks.com is reachable via ip address thus possible to link any doamin to Starbucks.'

26 Jan 2017

b'Starbucks' disclosed a bug submitted by b'meals' 
b'Parameter Manipulation allowed for editing the shipping address for other user\xe2\x80\x99s teavana.com subscriptions.'

26 Jan 2017

b'itBit Exchange' disclosed a bug submitted by b'4lemon' 
b'Round error issue -> produce money for free'

26 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'khalidamin' 
b'Email Spoofing'

25 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'pkkothawade' 
b'Nextcloud.com is vulnerable to SWEET32 attack'

25 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b's4y0b' 
b'Reflected XSS on sankarikoulutus (viestinta.lahitapiola.fi)'

25 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b's4y0b' 
b'SQL Injection in lapsuudenturva (viestinta.lahitapiola.fi)'

25 Jan 2017

b'Twitter' disclosed a bug submitted by b'akhil-reni' 
b'leaking Digits OAuth authorization to third party websites'

24 Jan 2017

b'Badoo' disclosed a bug submitted by b'abiral' 
b'Email Spoofing'

24 Jan 2017

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Users can download old project exports due to unclaimed namespace'

23 Jan 2017

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Every user can delete public deploy keys'

23 Jan 2017

b'GitLab' disclosed a bug submitted by b'jobert' 
b'User with guest access can access private merge requests'

23 Jan 2017

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Users with guest access can post notes to private merge requests, issues, and snippets'

23 Jan 2017

1 ... 540 541 542 543 544 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM