Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'VK.com' disclosed a bug submitted by b'povargek' 
b'????? 2??-??????? ??????????? / 2FA Bypass'

12 Apr 2017

b'Harvest' disclosed a bug submitted by b'jobert' 
b'Client can redirect payment, causing payment discrepancy between Harvest and PayPal'

12 Apr 2017

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'Unauthorised read Access to Expense Receipt of any user in the company(Vertical Privilege escalation)'

12 Apr 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'OCSP Status Request extension unbounded memory growth (CVE-2016-6304)'

12 Apr 2017

b'concrete5' disclosed a bug submitted by b'rtyler' 
b'Full Page Caching Stored XSS Vulnerability'

11 Apr 2017

b'Skyliner' disclosed a bug submitted by b'mksahilisr' 
b'Password reset Token not expiring '

11 Apr 2017

b'Informatica' disclosed a bug submitted by b'gujjuboy' 
b'[ipm.informatica.com]- Broken Authentication'

11 Apr 2017

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'CSRF on cards API'

11 Apr 2017

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'DOM based cookie bomb'

11 Apr 2017

b'HackerOne' disclosed a bug submitted by b'jamesclyde' 
b'javascript: and mailto: links are allowed in JIRA integration settings'

10 Apr 2017

b'HackerOne' disclosed a bug submitted by b'intidc' 
b'Example HackerOne security@ forward domain is not registered'

10 Apr 2017

b'Harvest' disclosed a bug submitted by b'michiel' 
b'Login bypass on travel.?????????? aka "Harvest Spring Summit 2017"'

10 Apr 2017

b'Apache httpd (IBB)' disclosed a bug submitted by b'danse' 
b' DoS vulnerability in mod_auth_digest CVE-2016-2161'

10 Apr 2017

b'ok.ru' disclosed a bug submitted by b'linkks' 
b'web.xml configuration file disclosure'

10 Apr 2017

b'Rockstar Games' disclosed a bug submitted by b'rmtyronerf' 
b'SSLv3 POODLE Vulnerability'

09 Apr 2017

b'Informatica' disclosed a bug submitted by b'albinowax' 
b'[kb.informatica.com] Stored XSS'

09 Apr 2017

b'Gratipay' disclosed a bug submitted by b'wazehell' 
b'POODLE SSLv3.0'

09 Apr 2017

b'Gratipay' disclosed a bug submitted by b'sp1d3rs' 
b'Transferring incorrect data to the http://gip.rocks/v1 endpoint with correct Content-Type leads to local paths disclosure through the error message'

08 Apr 2017

b'Informatica' disclosed a bug submitted by b'fillawful' 
b'Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]'

08 Apr 2017

b'Gratipay' disclosed a bug submitted by b'a0xnirudh' 
b'HTTP trace method is enabled on gip.rocks'

08 Apr 2017

1 ... 566 567 568 569 570 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM