Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP (IBB)' disclosed a bug submitted by b'hanno' 
b'Out of bounds memory read in unserialize()'

28 May 2017

b'Cuvva' disclosed a bug submitted by b'leet-boy' 
b'Missing rate limit on https://underwriter.partner.cuvva.com/login/verify'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'streaak' 
b'Missing Rate limiting on https://underwriter.partner.cuvva.com/login'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'bhumish' 
b'Verification code for Underwriter dashboard can be brute-forced'

27 May 2017

b'BrickFTP' disclosed a bug submitted by b'xanderi' 
b'CSRF @ configuration '

27 May 2017

b'Maximum' disclosed a bug submitted by b'jorik' 
b"Possible to view and takeover other user's education and courses @ mijn.werkenbijdefensie.nl"

27 May 2017

b'Maximum' disclosed a bug submitted by b'jorik' 
b'Possible to unsubscribe from activities using CSRF @ mijn.werkenbijdefensie.nl'

27 May 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'a0xnirudh' 
b'Reflected File Download in community.ubnt.com/restapi/'

27 May 2017

b'Twitter' disclosed a bug submitted by b'rbcafe' 
b'[??????????.gnip.com] .htpasswd disclosure'

26 May 2017

b'Uber' disclosed a bug submitted by b'hurthearts' 
b'Session not expired When logout [partners.uber.com]'

26 May 2017

b'Instacart' disclosed a bug submitted by b'clizsec' 
b'WordPress Authentication Denial of Service'

26 May 2017

b'WordPress' disclosed a bug submitted by b'codertom' 
b'Stored but [SELF] XSS in mercantile.wordpress.org'

26 May 2017

b'Cuvva' disclosed a bug submitted by b'cyriac' 
b'CRLF Injection [vpn.corp.cuvva.com]'

26 May 2017

b'Coinbase' disclosed a bug submitted by b'phspade' 
b'[buy.coinbase.com]Content Injection'

25 May 2017

b'Gratipay' disclosed a bug submitted by b'smziaurrashid' 
b'Gratipay Website CSP "script-scr" includes "unsafe-inline"'

25 May 2017

b'Cuvva' disclosed a bug submitted by b'zerotoone' 
b'Your two domain login email address are disclosed in '

25 May 2017

b'Cuvva' disclosed a bug submitted by b'd0rkerdevil' 
b'Clickjacking vulnerability in support-dashboard.corp.cuvva.co'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'xawdxawdx' 
b'Xss ? https://e.mail.ru/'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'khalidamin' 
b'IDOR in tender.mail.ru leading to Information Disclosure'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'xawdxawdx' 
b'xss ?? ?????????? ??????? ??? ?? mail.ru (Cross-Site Scripting)'

25 May 2017

1 ... 542 543 544 545 546 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM