Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Weblate' disclosed a bug submitted by b'lov3_you' 
b'ClickJacking on Debug'

16 Jun 2017

b'Weblate' disclosed a bug submitted by b'lov3_you' 
b'7BO: Binary Option Robot URL should be HTTPS'

16 Jun 2017

b'Weblate' disclosed a bug submitted by b'lov3_you' 
b'Facebook share URL should be HTTPS'

16 Jun 2017

b'Gratipay' disclosed a bug submitted by b'hogarth45' 
b'limit number of images in statement'

16 Jun 2017

b'Gratipay' disclosed a bug submitted by b'ishahriyar' 
b'Prevent content spoofing on /~username/emails/verify.html'

16 Jun 2017

b'Snapchat' disclosed a bug submitted by b'wplus' 
b'CRLF Injection at vpn.bitstrips.com'

15 Jun 2017

b'Gratipay' disclosed a bug submitted by b'bugdiscloseguys' 
b'X-Content-Type Header Missing For aspen.io'

15 Jun 2017

b'Twitter' disclosed a bug submitted by b'mishre' 
b'Vine - overwrite account associated with email via android application'

14 Jun 2017

b'Adobe' disclosed a bug submitted by b'khalidamin' 
b'Parameter tampering can result in product price manipulation'

14 Jun 2017

b'Starbucks' disclosed a bug submitted by b'inhibitor181' 
b'Open redirect / Reflected XSS payload in root that affects all your sites (store.starbucks.* / shop.starbucks.* / teavana.com)'

14 Jun 2017

b'WordPress' disclosed a bug submitted by b'ysx' 
b'[mercantile.wordpress.org] Reflected XSS via AngularJS Template Injection'

14 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shogunlab' 
b'Reflected XSS in a DoD Website'

14 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'akaki' 
b'Blind SQLi in ice.disa.mil/index.cfm'

14 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a DoD website'

14 Jun 2017

b'Stellar.org' disclosed a bug submitted by b'v1nsh4n' 
b'Session Cookie without HttpOnly and secure flag set'

14 Jun 2017

b'WordPress' disclosed a bug submitted by b'pabster' 
b'DOM Based XSS In mercantile.wordpress.org'

14 Jun 2017

b'YouPorn' disclosed a bug submitted by b'sp1d3rs' 
b'DOM-based XSS on youporn.com (main page)'

13 Jun 2017

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured DB instance'

13 Jun 2017

b'Mixmax' disclosed a bug submitted by b'mrreboot' 
b'Missing restriction on string size of contact field'

13 Jun 2017

b'YouPorn' disclosed a bug submitted by b'cyber-guard' 
b'Account hijack via deleted PH account'

13 Jun 2017

1 ... 558 559 560 561 562 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM