Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'mishre' 
b"Twitter for android is exposing user's location to any installed android app"

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Disclosure of administrators via JSON on nextcloud.com Wordpress'

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dem0n' 
b'WordPress <= 4.6.1 Stored XSS Via Theme File'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'id-is-vulnerable' 
b'Create New User Whilst Logged On'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'meals' 
b'Parameter Manipulation allowed for viewing of other user\xe2\x80\x99s teavana.com orders'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'e3xpl0it' 
b'Dom Based Xss DIV.innerHTML parameters store.starbucks*'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'Bad content-type in response header when getting document can lead to html injection'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'URI scheme bypass in mail app lead to HTML content spoof and opener control'

12 Jan 2017

b'OLX' disclosed a bug submitted by b'mohamedsherif' 
b'Directory Listing of all the resource files of olx.com.eg '

12 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'vishnu1' 
b'Near-duplicate accounts allowed with ignored email mutations'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'meals' 
b'Remote code execution on an Army website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on a Department of Defense website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on a Department of Defense website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'DOM Based XSS on an Army website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on an Army website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit' 
b'Information leakage on a Department of Defense website'

12 Jan 2017

b'StopTheHacker' disclosed a bug submitted by b'strutsonsecurity' 
b'Wordpress flashmediaelement.swf XSS on stopthehacker.com '

12 Jan 2017

b'Harvest' disclosed a bug submitted by b'bugdiscloseguys' 
b'Linking Invoice to uninvited project.'

12 Jan 2017

b'Harvest' disclosed a bug submitted by b'bugdiscloseguys' 
b'Extracting private info of estimates.'

12 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'tunz' 
b'Integer Overflow in mrb_ary_set'

12 Jan 2017

1 ... 564 565 566 567 568 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM