Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Discourse' disclosed a bug submitted by b'skavans' 
b'Stored XSS in posts because of absence of oembed variables values escaping'

20 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'mostafamamdoh2015' 
b'Validation bypass on user profile'

20 Jan 2017

b'OLX' disclosed a bug submitted by b'yappare' 
b'XSS on Meta Tag at https://m.olx.ph'

20 Jan 2017

b'Brave Software' disclosed a bug submitted by b'i1iii11iiiii111iii1' 
b'No user confirmation when an auto-updated extension gets more permissions'

20 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'arnonymous' 
b'Missing restriction on string size in profile fields'

20 Jan 2017

b'Badoo' disclosed a bug submitted by b'alvares97' 
b'Leave inaccessible messaging system with a message (https://us1.badoo.com)'

19 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'whitehattushu' 
b'Disclosure of IBM Websphere page'

19 Jan 2017

b'Urban Dictionary' disclosed a bug submitted by b'ak1t4' 
b'Text injection on Auth problem at urbandictionary.com'

17 Jan 2017

b'Starbucks' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'http://digital.starbucks.com/ Creation of Google G Suite Account on Behalf of starbucks. '

17 Jan 2017

b'Starbucks' disclosed a bug submitted by b'ddworken' 
b'Persistent XSS in www.starbucks.com'

17 Jan 2017

b'Starbucks' disclosed a bug submitted by b'yappare' 
b'Improper Validation on Cancel Link Redirect'

17 Jan 2017

b'Instacart' disclosed a bug submitted by b'footstep' 
b'Authentication Bypass in Updating Personal Information'

17 Jan 2017

b'Imgur' disclosed a bug submitted by b'strukt' 
b'Stored XSS in albums on http://m.imgur.com/'

17 Jan 2017

b'Algolia' disclosed a bug submitted by b'malcolmx' 
b'2-factor authentication bypass'

17 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'HTTP-Basic Authentication on logs.nextcloud.com'

17 Jan 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'm7mdharoun' 
b'xss in Theme http://bztfashion.booztx.com'

16 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dremos' 
b'Avatar image upload and bypass real image verification '

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'kelia' 
b'ruby DoS https://www.mruby.science'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Type confusion in wrap_decimal leading to memory corruption'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Null pointer dereference due to TOCTTOU bug in mrb_time_initialize'

15 Jan 2017

1 ... 563 564 565 566 567 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM