Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'knn' 
b'XSS vulnerability using GIF tags'

14 Feb 2017

b'OLX' disclosed a bug submitted by b'cydefenser' 
b'Multiple vulnerabilities in http://blog.dubizzle.com/uae'

14 Feb 2017

b'Starbucks' disclosed a bug submitted by b'faisalahmed' 
b'Reflected XSS by exploiting CSRF vulnerability on teavana.com wishlist comment module. (wishlist-comments)'

13 Feb 2017

b'Starbucks' disclosed a bug submitted by b'faisalahmed' 
b'CSRF exploit | Adding/Editing comment of wishlist items (teavana.com - Wishlist-Comments)'

13 Feb 2017

b'Pornhub' disclosed a bug submitted by b'vijay_kumar1110' 
b"[idor] Profile Admin can pin any other user's post on his stream wall"

13 Feb 2017

b'Twitter' disclosed a bug submitted by b'punkrock' 
b'Sub Domain Takeover at mk.prd.vine.co'

13 Feb 2017

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'API: Bug in method auth.signup , ?????? ??????????? ?????????? ??????? '

13 Feb 2017

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'?????????? ? ???? ?????????? ??? ?????? ???????????? (??????? ?????????????)'

13 Feb 2017

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'?????????? ????????? ???? ??????? ????????? ?? (?? ???????????????? ??????? ????????)'

13 Feb 2017

b'YouPorn' disclosed a bug submitted by b'cyber-guard' 
b'Account takeover via Pornhub Oauth'

13 Feb 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Drone Nextcloud'

12 Feb 2017

b'Mail.Ru' disclosed a bug submitted by b'rbcafe' 
b'Disclosure of information on static.dl.mail.ru'

12 Feb 2017

b'Mail.Ru' disclosed a bug submitted by b'bugwrangler' 
b'Activities are not Protected and able to crash app using other app (Can Malware or third parry app).'

12 Feb 2017

b'OWOX, Inc.' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS at https://finance.owox.com/customer/accountList'

12 Feb 2017

b'Nextcloud' disclosed a bug submitted by b'raunak2002' 
b'User Information Disclosure via REST API'

11 Feb 2017

b'Algolia' disclosed a bug submitted by b'no_thing' 
b'Reflected XSS'

11 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'yasar' 
b'SQL Injection /webApp/cancel_iltakoulu regId parameter (viestinta.lahitapiola.fi)'

11 Feb 2017

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service attack on Brave Browser.'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV Null Pointer mrb_str_concat()'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV mrb_obj_freeze() Manipulating Register RAX and RSI'

10 Feb 2017

1 ... 557 558 559 560 561 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM