REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Legal Robot'
disclosed a bug submitted by
b'gujjuboy10x00'
b'showing Joined time function design issue '
31 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'japzdivino'
b'2FA Error Handling on Google Authenticator'
31 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'smziaurrashid'
b'Lack of input validation in e-mail & user name, job title, company name field'
31 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'dilip_prakash'
b'Subdomain misconfiguration [mail.legalrobot.com]'
31 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'3xp1r3_pr1nc3'
b'Big XSS vulnerability!'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'krazyhack3r'
b'LUCKY13 (CVE-2013-0169) effects legalrobot.com'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'c0defir3'
b'SSL : breach compression attack (CVE-2013-3587) effects legalrobot.com'
30 Jul 2017
b'WakaTime'
disclosed a bug submitted by
b'c0defir3'
b'Failure to check password history'
30 Jul 2017
b'OLX'
disclosed a bug submitted by
b'tsug0d'
b'Stored XSS in buy topup OLX Gold Credits '
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'gujjuboy10x00'
b'No notification on change password feature'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'reydd'
b'[Cross-domain Referrer leakage] Password reset token leakage via referrer'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'gujjuboy10x00'
b'Meta characters are not filtered into full name on profile page'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'gujjuboy10x00'
b"Pages don't render in old browsers like IE11"
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'myster'
b'Token leakage by referrer header & analytics'
30 Jul 2017
b'Legal Robot'
disclosed a bug submitted by
b'gujjuboy10x00'
b'[New Feature] Password history check'
30 Jul 2017
b'Dashlane'
disclosed a bug submitted by
b'corb3nik'
b'Throttling Bypass - ws1.dashlane.com'
30 Jul 2017
b'Bitvise'
disclosed a bug submitted by
b'tanzanian_hacker1'
b'The POODLE attack (SSLv3 supported)'
30 Jul 2017
b'Automattic'
disclosed a bug submitted by
b'neex'
b'SSRF and local file disclosure in https://wordpress.com/media/videos/ via FFmpeg HLS processing'
29 Jul 2017
b'concrete5'
disclosed a bug submitted by
b'bl4de'
b'Stored XSS in Pages SEO dialog Name field (concrete5 8.1.0)'
27 Jul 2017
b'Starbucks'
disclosed a bug submitted by
b'rbcafe'
b'[connect.teavana.com] Open Redirect and abuse of connect.teavana.com'
27 Jul 2017
1
...
564
565
566
567
568
...
776
BY DENIS WERNER - @NOBBD -
IMPRESSUM