Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Legal Robot' disclosed a bug submitted by b'shani_1' 
b"AWS S3 website can't serve security headers, may allow clickjacking"

28 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'tbmnull' 
b'stored SELF xss on Basic Google Maps Placemarks Settings plugin'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'ethnicalhacker' 
b'Potentially vulnerable version of Apache software in and default files on https://iandunn.name/'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'superngorks' 
b'bypass to csv injection'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'jshindl' 
b'Send emails to all users using Camptix'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'jigarthakkar39' 
b'Physical Access to Mobile App Allows Local Attribute Updates without Authentication'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'bobrov' 
b'Open Redirect in m.uber.com'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'tgpanackal' 
b'Unvalidated/Open Redirect allowing attackers to implement phishing attack'

27 Sep 2016

b'Shopify' disclosed a bug submitted by b'ishwar_prasad_bhat' 
b'Payment gateway status transferred to Shopify without authentication'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'cablej' 
b'SSRF in account webhook (through API)'

27 Sep 2016

b'Instacart' disclosed a bug submitted by b'cablej' 
b'Issues with uploading list images'

26 Sep 2016

b'Instacart' disclosed a bug submitted by b'hussain_0x3c' 
b'Cookie-Based Injection'

26 Sep 2016

b'Django' disclosed a bug submitted by b'bobrov' 
b'CSRF protection bypass on any Django powered site via Google Analytics'

26 Sep 2016

b'Trello' disclosed a bug submitted by b'mubassir92' 
b'Subdomain Take over & username enemuration'

26 Sep 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[odnoklassniki.ru] XSS via Host'

26 Sep 2016

b'Shopify' disclosed a bug submitted by b'bobrov' 
b'[apps.shopify.com] Open Redirect'

26 Sep 2016

b'ownCloud' disclosed a bug submitted by b'm4drob0t' 
b'Accessable Htaccess'

26 Sep 2016

b'Keybase' disclosed a bug submitted by b'bobrov' 
b'[keybase.io] Open Redirect'

26 Sep 2016

b'New Relic' disclosed a bug submitted by b'foundstone-kunal' 
b'Password disclosure during signup process'

25 Sep 2016

b'New Relic' disclosed a bug submitted by b'todayisnew' 
b'Sensitive information contained with New Relic APM iOS application'

25 Sep 2016

1 ... 564 565 566 567 568 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM