Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'procode701' 
b'password reset token leaking allowed for ATO of an Uber account'

17 May 2017

b'Weblate' disclosed a bug submitted by b'pavanw3b' 
b'session id missing secure flag - Hosted Website'

17 May 2017

b'Weblate' disclosed a bug submitted by b'atruba' 
b'Rate Limit Bypass on login Page'

17 May 2017

b'Weblate' disclosed a bug submitted by b'atruba' 
b'User Enumeration when adding email to account'

17 May 2017

b'Weblate' disclosed a bug submitted by b'atruba' 
b'Spamming any user from Reset Password Function'

17 May 2017

b'Weblate' disclosed a bug submitted by b'edio' 
b'CSV export filter bypass leads to formula injection.'

17 May 2017

b'Uber' disclosed a bug submitted by b'kushal89shah' 
b"ability to retrieve a user's phone-number/email for a given inviteCode"

17 May 2017

b'Weblate' disclosed a bug submitted by b'anonymans' 
b'Already Registered Email Disclosure'

17 May 2017

b'Weblate' disclosed a bug submitted by b'codertom' 
b'Content Spoofing in error message'

17 May 2017

b'Weblate' disclosed a bug submitted by b'streaak' 
b'No expiration of session ID after Password change'

17 May 2017

b'Weblate' disclosed a bug submitted by b'khalidamin' 
b'Missing DMARC on weblate.org'

17 May 2017

b'Weblate' disclosed a bug submitted by b'khalidamin' 
b'Abuse of Api that causes spamming users and possible DOS due to missing rate limit on contact form'

17 May 2017

b'Weblate' disclosed a bug submitted by b'khalidamin' 
b'Abuse of Api that causes spamming users and possible DOS due to missing rate limit'

17 May 2017

b'Weblate' disclosed a bug submitted by b'eveez' 
b'Content Spoofing'

17 May 2017

b'Weblate' disclosed a bug submitted by b'eugui' 
b'Specify maximal length in new comment'

17 May 2017

b'Weblate' disclosed a bug submitted by b'eugui' 
b'weblate.org: X-XSS-Protection not enabled'

17 May 2017

b'Weblate' disclosed a bug submitted by b'eugui' 
b'hosted.weblate.org: X-XSS-Protection not enabled'

17 May 2017

b'Weblate' disclosed a bug submitted by b'japzdivino' 
b'Logout CSRF'

17 May 2017

b'Weblate' disclosed a bug submitted by b'ysx' 
b'[demo.weblate.org] Stored Self-XSS via Editor Link in Profile'

17 May 2017

b'Weblate' disclosed a bug submitted by b'eugui' 
b'Specify maximal length in translation'

17 May 2017

1 ... 547 548 549 550 551 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM