Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Badoo' disclosed a bug submitted by b'c0rte' 
b'No rate-limit in SERVER_SECURITY_CHECK'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ng1' 
b'Content Spoofing or Text Injection (404 error page injection)'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'tsug0d' 
b'Reflected XSS in LTContactFormReceiver (/cs/Satellite)'

10 Nov 2016

b'Eobot' disclosed a bug submitted by b'mr_sharma_' 
b'No password length restriction'

10 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Using plain git protocol (vulnerable to MITM)'

09 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing GIT tag/commit verification in Docker'

09 Nov 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service(POP UP Recursion) on Brave browser'

07 Nov 2016

b'Pornhub' disclosed a bug submitted by b'vijay_kumar1110' 
b'[idor] Unauthorized Read access to all the private posts(Including Photos,Videos,Gifs)'

05 Nov 2016

b'New Relic' disclosed a bug submitted by b'hogarth45' 
b'Emails and alert policies can be altered by malicious users.'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'pavanw3b' 
b'Host Header Injection / Cache Poisoning'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'cjlegacion' 
b'Cookie Misconfiguration'

04 Nov 2016

b'Algolia' disclosed a bug submitted by b'punkrock' 
b'Possilbe Sub Domain takever at prestashop.algolia.com'

04 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'lmx' 
b'More content spoofing through dir param in the files app'

04 Nov 2016

b'CodeIgniter' disclosed a bug submitted by b'syndr0me' 
b'Link sanitation bypass in xss_clean() '

04 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kholy' 
b'BAD Code ! '

04 Nov 2016

b'Instacart' disclosed a bug submitted by b'michiel' 
b'Authorization Bypass in Delivery Chat Logs'

03 Nov 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Ability to access all user authentication tokens, leads to RCE'

03 Nov 2016

b'Blockchain' disclosed a bug submitted by b'lewerkun' 
b'Information disclosure at https://blockchain.atlassian.net'

03 Nov 2016

b'New Relic' disclosed a bug submitted by b'seifelsallamy' 
b'Open redirection '

03 Nov 2016

b'Brave Software' disclosed a bug submitted by b'scorpyo' 
b'[website] Script injection in newsletter signup https://brave.com/brave_youth_program_signup.html'

03 Nov 2016

1 ... 555 556 557 558 559 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM