Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Weblate' disclosed a bug submitted by b'asaxena2190' 
b'Design Flaw in session management of password reset '

02 Jun 2017

b'Weblate' disclosed a bug submitted by b'mansoor_gilal' 
b'No notificatoin sent on email after account deletion.'

02 Jun 2017

b'Weblate' disclosed a bug submitted by b'sp1d3rs' 
b'Self-XSS can be achieved in the editor link using filter bypass'

02 Jun 2017

b'Weblate' disclosed a bug submitted by b'japzdivino' 
b'Login CSRF : Login Authentication Flaw'

02 Jun 2017

b'Weblate' disclosed a bug submitted by b'chols' 
b'No Rate Limiting at /contact'

02 Jun 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Invalid Pointer reference in L_RESCUE'

01 Jun 2017

b'Cuvva' disclosed a bug submitted by b'inhibitor181' 
b'No rate limiting at POST /2/2017-05-22/send_identifier_token'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ramsexy' 
b'Reflected XSS on a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit' 
b'Reflected XSS on a DoD website'

01 Jun 2017

b'Cuvva' disclosed a bug submitted by b'b3nac' 
b"IDOR spam anyone's cellphone number through Cuvva app link"

01 Jun 2017

b'PHP (IBB)' disclosed a bug submitted by b'rc0r' 
b'Use of uninitialized memory in unserialize()'

01 Jun 2017

b'Shopify' disclosed a bug submitted by b'bored-engineer' 
b'XSS in $shop$.myshopify.com/admin/ via twine template injection in "Shopify.API.Modal.input" method when using a malicious app'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sulemanmalik03' 
b'Server side information disclosure on a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'babayaga_' 
b'Information disclosure vulnerability on a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0daystolive' 
b'Remote Code Execution (RCE) in a DoD website'

01 Jun 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'uranium238' 
b'Insecure direct object reference vulnerability on a DoD website'

01 Jun 2017

b'ownCloud' disclosed a bug submitted by b'js_whitehat' 
b'doc.owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)'

01 Jun 2017

b'Mixmax' disclosed a bug submitted by b'leet-boy' 
b'Attacker can possibly perform an CSRF. '

01 Jun 2017

1 ... 562 563 564 565 566 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM