Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Discourse' disclosed a bug submitted by b'knn' 
b'XSS vulnerability on Audio and Video parsers'

10 Jan 2017

b'VK.com' disclosed a bug submitted by b'n1__' 
b'Stored XSS ? ?????? ??????????'

10 Jan 2017

b'Discourse' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'DOM Based XSS in Discourse Search'

10 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dawgyg' 
b'XXE on DoD web server'

09 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'ak1t4' 
b'Error Page Content Spoofing or Text Injection (viestinta.lahitapiola.fi)'

09 Jan 2017

b'Brave Software' disclosed a bug submitted by b'aaditya_purani' 
b'[iOS/Android] Address Bar Spoofing Vulnerability '

08 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'anandakshya' 
b'SQL Injection on viestinta.lahitapiola.fi'

07 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nahamsec' 
b'Local File Inclusion vulnerability on an Army system allows downloading local files'

06 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sulemanmalik03' 
b'Server side information disclosure'

06 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS in a Navy website'

06 Jan 2017

b'OWOX, Inc.' disclosed a bug submitted by b'hackerish' 
b'Access to Grafana Dashboard'

06 Jan 2017

b'Coinbase' disclosed a bug submitted by b'bugdiscloseguys' 
b'Authentication Issue'

05 Jan 2017

b'Coinbase' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b'Content Injection error page'

05 Jan 2017

b'HackerOne' disclosed a bug submitted by b'deepankerchawla' 
b'Information Disclosure in /skills call'

05 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'an0n-j' 
b'Deleting Key-value pair from Frozen HASH or Clearing a Frozen HASH'

05 Jan 2017

b'Udemy' disclosed a bug submitted by b'csanuragjain' 
b'Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token'

05 Jan 2017

b'Udemy' disclosed a bug submitted by b'gribdan' 
b'AWS S3 bucket writable for authenticated aws user'

05 Jan 2017

b'Slack' disclosed a bug submitted by b'michiel' 
b'Subdomain takeover on podcasts.slack-core.com'

04 Jan 2017

b'Snapchat' disclosed a bug submitted by b's_p_q_r' 
b'[render.bitstrips.com] Stored XSS via an incorrect avatar property value'

04 Jan 2017

b'Slack' disclosed a bug submitted by b'imran_hadid' 
b'Store XSS'

01 Jan 2017

1 ... 566 567 568 569 570 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM