Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'shopify-scripts' disclosed a bug submitted by b'mg36' 
b'mruby heap use-after-free '

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'clizsec' 
b'Information disclosure vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'clizsec' 
b'Cross-Site Scripting (XSS) on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ramsexy' 
b'XSS on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit' 
b'Reflected XSS on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit' 
b'SQL injection vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'kunal_khubchandani' 
b'HTML injection vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joshualaurencio' 
b'Information disclosure vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Remote file inclusion vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fransrosen' 
b'Local file inclusion vulnerability on a DoD website'

27 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rashedhasan007' 
b'Reflected XSS vulnerability in a DoD website '

27 Apr 2017

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'Restricted User can view multiple account details including customer_root_account_id, payment method, date of first payment, etc.'

27 Apr 2017

b'Imgur' disclosed a bug submitted by b'neex' 
b'RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`'

26 Apr 2017

b'Rockstar Games' disclosed a bug submitted by b'scraps' 
b'Login form on non-HTTPS page'

26 Apr 2017

b'FormAssembly' disclosed a bug submitted by b'bogdantcaciuc' 
b'XSS on username when register to proffesional account'

26 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'dr-cdqh' 
b'Cross Site Scripting'

26 Apr 2017

b'Homebrew' disclosed a bug submitted by b'zephrfish' 
b'[bot.brew.sh] Full Path Disclosure'

26 Apr 2017

b'Phabricator' disclosed a bug submitted by b'wester' 
b'The mailbox verification API interface is unlimited and can be used as a mailbox bomb'

26 Apr 2017

b'Mapbox' disclosed a bug submitted by b'saad_ahmed' 
b'Open Aws Amazon S3 Buckets'

25 Apr 2017

b'Homebrew' disclosed a bug submitted by b'mrr3boot' 
b'Sensitive information disclosure via response headers on jenkins.brew.sh'

25 Apr 2017

1 ... 564 565 566 567 568 ... 744

BY DENIS WERNER - @NOBBD - IMPRESSUM