Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'New Relic' disclosed a bug submitted by b'waqar_vicky' 
b'A Signup page does not properly validate the authenticity token at the server side.'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'waqar_vicky' 
b'A Log in page does not properly validate the authenticity token at the server side'

20 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards' 
b'Brute force unsubscription on /webApp/unsub_sb (viestinta.lahitapiola.fi)'

19 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'XSS on 3rd party service Localtapiola is using'

18 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'ahsantahir' 
b'Reflected XSS and Open Redirect (verkkopalvelu.lahitapiola.fi)'

18 Mar 2017

b'Bime' disclosed a bug submitted by b'4lemon' 
b'SSRF issue'

18 Mar 2017

b'Zendesk' disclosed a bug submitted by b'boniao_norwin' 
b'a stored xss in web widget chat'

18 Mar 2017

b'Zendesk' disclosed a bug submitted by b'4lemon' 
b'Error stack trace enabled'

18 Mar 2017

b'Zopim' disclosed a bug submitted by b'prbln' 
b'express config leaking stacktrace'

18 Mar 2017

b'Zopim' disclosed a bug submitted by b'bagipro' 
b'Android SDK - CREATE_REQUEST broascast is unprotected'

18 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'Creating arbitrary cookies values /cs/CookieServer (www.lahitapiola.fi)'

18 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'irotem' 
b'High server resource usage on captcha (viestinta.lahitapiola.fi)'

18 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'rnmx' 
b'SMTP configuration vulnerability viestinta.lahitapiola.fi'

18 Mar 2017

b'Gratipay' disclosed a bug submitted by b'jaypatel' 
b'Limit email address length'

18 Mar 2017

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Incomplete or No Cache-control and Pragma HTTP Header Set'

17 Mar 2017

b'Rockstar Games' disclosed a bug submitted by b'anshuman_bh' 
b'[IMP] - Blind XSS in the admin panel for reviewing comments'

17 Mar 2017

b'Gratipay' disclosed a bug submitted by b'hharry' 
b'Send email asynchronously'

17 Mar 2017

b'Alvosec' disclosed a bug submitted by b'zephrfish' 
b'[ns2.????] Vulnerable to DNS Zone Transfer'

17 Mar 2017

b'FormAssembly' disclosed a bug submitted by b'edio' 
b'formassembly.com is vulnerable to padding-oracle attacks.'

17 Mar 2017

b'Moneybird' disclosed a bug submitted by b'yaworsk' 
b'Stored Cross Site Scripting in Customer Name'

17 Mar 2017

1 ... 547 548 549 550 551 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM