Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GlobaLeaks' disclosed a bug submitted by b'edio' 
b'GlobaLeaks is vulnerable to timing attacks.'

26 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'CSRF allows attacker to delete item from customer\'s "Postilaatikko"'

25 Feb 2017

b'HackerOne' disclosed a bug submitted by b'devil13' 
b'Websites opened from reports can change url of report page '

25 Feb 2017

b'HackerOne' disclosed a bug submitted by b'1lastbr3ath' 
b"Report redaction doesn't apply to report title update activities"

25 Feb 2017

b'Starbucks' disclosed a bug submitted by b'toctou' 
b'Time-based Blind SQLi on news.starbucks.com'

24 Feb 2017

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b"Disclose any user's private email through API"

24 Feb 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'dineshdinz' 
b'Application code is not obfuscated -- OWASP M9 (2016)'

24 Feb 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'implosion' 
b'Bypass email validity in newsletter field'

24 Feb 2017

b'Ubiquiti Networks' disclosed a bug submitted by b's_p_q_r' 
b'[scores.ubnt.com] DOM based XSS at form.html'

24 Feb 2017

b'Dovecot' disclosed a bug submitted by b'socialfox' 
b'Information About Your System(Sensitive Directories)'

24 Feb 2017

b'Pornhub' disclosed a bug submitted by b'r0bbyz' 
b'vulnerabilitie'

23 Feb 2017

b'Alvosec' disclosed a bug submitted by b'edio' 
b'Alvocrypt uses a cryptographically insecure PRNG.'

23 Feb 2017

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Group admin can remove user from all his groups via API'

23 Feb 2017

b'Zendesk' disclosed a bug submitted by b'abhijeth' 
b'Missing function level access controls allowing attacker to abuse file access controls. Multiple vulnerabilities'

23 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'modam3rly' 
b"show control page if you insert ' at http://viestinta.lahitapiola.fi/"

22 Feb 2017

b'GoCD' disclosed a bug submitted by b'creased' 
b'Reflected XSS vector'

22 Feb 2017

b'Khan Academy' disclosed a bug submitted by b'hack40077' 
b' SSL/TLS Vulnerability at khanacademy.org'

22 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage'

22 Feb 2017

b'Lyst' disclosed a bug submitted by b'mrr3boot' 
b'Mixed Active content issue on https://www.lyst.com'

22 Feb 2017

b'New Relic' disclosed a bug submitted by b'zuh4n' 
b'Html injection in monitor name textbox'

22 Feb 2017

1 ... 554 555 556 557 558 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM