Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Brave Software' disclosed a bug submitted by b'xifengweiyu' 
b'Address bar spoofing in Brave browser via. window close warnings'

10 Aug 2017

b'Brave Software' disclosed a bug submitted by b'xifengweiyu' 
b'[iOS] URL can be replaceState by blob URL in iOS Brave'

10 Aug 2017

b'WakaTime' disclosed a bug submitted by b'reydd' 
b'[Privilege Escalation] Authenticated users can manipulate others fullname without their knowledge [Team Vector]'

10 Aug 2017

b'WakaTime' disclosed a bug submitted by b'reydd' 
b'[Privilege Escalation] Authenticated users can manipulate others fullname without their knowledge'

10 Aug 2017

b'ownCloud' disclosed a bug submitted by b'utkarsh123' 
b'This is not the security issue.'

09 Aug 2017

b'Zomato' disclosed a bug submitted by b'iampwned' 
b'Bypass OTP verification when placing Order'

09 Aug 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'thenickdude' 
b'Ability to log in as any user without authentication if ????????? is empty'

08 Aug 2017

b'Rockstar Games' disclosed a bug submitted by b'anshuman_bh' 
b'Ability to post comments to a crew even after getting kicked out'

08 Aug 2017

b'Gratipay' disclosed a bug submitted by b'lovepakistan' 
b'SPF Protection not used, I can hijack your email server'

08 Aug 2017

b'Gratipay' disclosed a bug submitted by b'anshad' 
b'Sub domain take over in gratipay.com'

08 Aug 2017

b'Legal Robot' disclosed a bug submitted by b'goodhackonly' 
b'2FA user enumeration via login'

08 Aug 2017

b'Mixmax' disclosed a bug submitted by b'faisal2542' 
b'Public calendar link can be invisible'

07 Aug 2017

b'Ruby' disclosed a bug submitted by b'sandeep_hodkasia' 
b'Open aws s3 bucket s3://rubyci'

06 Aug 2017

b'WakaTime' disclosed a bug submitted by b'asaxena2190' 
b'Impersonation of Wakatime user using Invitation functionality.'

06 Aug 2017

b'Starbucks' disclosed a bug submitted by b'ynsy' 
b'Full Api Access and Run All Functions via Starbucks App'

06 Aug 2017

b'Dropbox' disclosed a bug submitted by b'leovin' 
b'Missing URL sanitization in comments can be leveraged for phishing'

04 Aug 2017

b'Khan Academy' disclosed a bug submitted by b'utkarsh123' 
b'Password Functionality not working correctly'

03 Aug 2017

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'CSRF Vulnerability allows attackers to steal SocialClub private token.'

03 Aug 2017

b'Kaspersky Lab' disclosed a bug submitted by b'huntman' 
b'In App purchase Hack '

03 Aug 2017

b'Phabricator' disclosed a bug submitted by b'luke081515' 
b'Credential gets exposed'

02 Aug 2017

1 ... 553 554 555 556 557 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM