Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WakaTime' disclosed a bug submitted by b'footstep' 
b'Email Injection through Password Reset'

20 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'mostafamamdoh' 
b'Token leakage by referrer'

19 Jul 2017

b'Shopify' disclosed a bug submitted by b'inhibitor181' 
b'IDOR [partners.shopify.com] - User with ONLY Manage apps permission is able to get shops info and staff names from inside the shop'

19 Jul 2017

b'Zomato' disclosed a bug submitted by b'kuroi-sh' 
b'SQL Injection, exploitable in boolean mode'

19 Jul 2017

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'[?????????] Hardcoded credentials in Android App'

19 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'brdoors4' 
b'Non-functional 2FA recovery codes'

19 Jul 2017

b'Mixmax' disclosed a bug submitted by b'encrypt' 
b'Blind SSRF due to img tag injection in career form'

19 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'zk34911' 
b'Users with 2FA can have multiple sessions'

19 Jul 2017

b'ThisData' disclosed a bug submitted by b'pabster' 
b'Insecure Cache-Control Leading to API key Retrieval'

18 Jul 2017

b'Mixmax' disclosed a bug submitted by b'cablej' 
b'SSRF via webhook'

18 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'babayaga_' 
b'Intercom chat session information persists after logout'

18 Jul 2017

b'WakaTime' disclosed a bug submitted by b'3thic4l' 
b'No rate limit on creating private leaderboards.'

18 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'fletcherr' 
b'User enumeration'

18 Jul 2017

b'WordPress' disclosed a bug submitted by b'skansing' 
b'Wordpress 4.7.2 - Two XSS in Media Upload when file too large.'

17 Jul 2017

b'WordPress' disclosed a bug submitted by b'skansing' 
b'Infrastructure - Photon - SSRF'

17 Jul 2017

b'Slack' disclosed a bug submitted by b'bagipro' 
b'Access of Android protected components via embedded intent'

17 Jul 2017

b'Legal Robot' disclosed a bug submitted by b'todayisnew' 
b'Domain takeover (legalrobot.co.za)'

17 Jul 2017

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'XSS in http://www.rockstargames.com/theballadofgaytony/js/jquery.base.js'

17 Jul 2017

b'Mail.Ru' disclosed a bug submitted by b'haxta4ok00' 
b'????? basic ??????????? [qpt.mail.ru]'

17 Jul 2017

b'ICQ' disclosed a bug submitted by b'linkks' 
b'Apache Server-Status Detected'

17 Jul 2017

1 ... 567 568 569 570 571 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM