Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'akhil-reni' 
b'Stealing User emails by clickjacking cards.twitter.com/xxx/xxx'

03 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'Multiple Reflected XSS /webApp/lahti (viestinta.lahitapiola.fi)'

03 Feb 2017

b'Trello' disclosed a bug submitted by b'dhaval' 
b'Full Sub Domain Takeover at help.trello.com.'

02 Feb 2017

b'Automattic' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'cloudup Subdomain Takeover That resolves to Desk.com ( CNAME cloudup.desk.com ) '

02 Feb 2017

b'Pushwoosh' disclosed a bug submitted by b'falldi' 
b'Clickjacking'

02 Feb 2017

b'WebSummit' disclosed a bug submitted by b'dhaval' 
b'Full Sub Domain Takeover at s3.websummit.net'

02 Feb 2017

b'Coinbase' disclosed a bug submitted by b'japzdivino' 
b'Requestor Email Disclosure via Email Notification'

02 Feb 2017

b'Informatica' disclosed a bug submitted by b'kasperkarlsson' 
b'[marketplace.informatica.com] Persistent XSS through document title'

02 Feb 2017

b'Legal Robot' disclosed a bug submitted by b'pkkothawade' 
b'SWEET32 TLS attack'

01 Feb 2017

b'Phabricator' disclosed a bug submitted by b'lucasveigaf' 
b'User with only Viewing Privilege can send message to Room'

01 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'volc' 
b'Memory disclosure in timegm'

31 Jan 2017

b'Vimeo' disclosed a bug submitted by b'panchocosil' 
b'Securing "Reset password" pages from bots'

31 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'tunz' 
b'Use After Free in str_replace'

31 Jan 2017

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured Kibana/Elasticsearch instance'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'filedeletor1' 
b'Subdomain Takeover at http://gameday.websummit.net'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'glc' 
b'Subdomain take over signup.websummit'

29 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'jimmyjohns' 
b'SQL Injection on /webApp/sijoitustalousuk email-parameter + potential lack of CSRF Token (viestinta.lahitapiola.fi)'

28 Jan 2017

b'Imgur' disclosed a bug submitted by b'i1ackerone_' 
b'Stored xss in ALBUM DESCRIPTION '

27 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Wordpress 4.7.1'

27 Jan 2017

b'Open-Xchange' disclosed a bug submitted by b'lukasreschke' 
b'Reflected Cross-Site Scripting due to vulnerable Flash component (Flashmediaelement.swf)'

27 Jan 2017

1 ... 561 562 563 564 565 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM