Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Udemy' disclosed a bug submitted by b'caffeinewriter' 
b"Able to view others' gifts on /gift/share URL, giftId is predictable, and easy to manipulate"

26 Mar 2017

b'Twitter' disclosed a bug submitted by b'r3ligious' 
b'Attacker can get vine repost user all informations even Ip address and location .'

25 Mar 2017

b'CloudFlare' disclosed a bug submitted by b'bobrov' 
b'[http2.cloudflare.com] Open Redirect'

24 Mar 2017

b'Harvest' disclosed a bug submitted by b'zuh4n' 
b"Cookie Injection at 'harvestapp.com'"

24 Mar 2017

b'OWOX, Inc.' disclosed a bug submitted by b'haxormad' 
b'Subdomain takeover in many subdomains'

24 Mar 2017

b'Airbnb' disclosed a bug submitted by b'dr-cdqh' 
b'Nginx Version Disclosure'

23 Mar 2017

b'Nextcloud' disclosed a bug submitted by b'bagipro' 
b'Android - Possible to intercept broadcasts about uploaded files'

23 Mar 2017

b'Nextcloud' disclosed a bug submitted by b'ryudox' 
b'Server version/OS type disclosure via HTTP Response Header'

23 Mar 2017

b'Blockchain' disclosed a bug submitted by b'cloudyvirus' 
b'HTTP Header Injection/HTTP_Response_Splitting'

23 Mar 2017

b'Gratipay' disclosed a bug submitted by b'valievkarim' 
b'upgrade Aspen on inside.gratipay.com to pick up CR injection fix'

22 Mar 2017

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Reflected XSS in U2F plugin by shipping the example endpoints'

22 Mar 2017

b'Xero' disclosed a bug submitted by b'4lemon' 
b'stored xss issue in folder name on go.xero.com/Docs/Folders'

21 Mar 2017

b'Whisper' disclosed a bug submitted by b'1n3' 
b'SMS Invite Form Abuse'

21 Mar 2017

b'Uber' disclosed a bug submitted by b'kazan71p' 
b'SQL injection in 3rd party software Anomali'

21 Mar 2017

b'GitLab' disclosed a bug submitted by b'edio' 
b'Gitlab.com is vulnerable to reverse tabnabbing.'

21 Mar 2017

b'Mapbox' disclosed a bug submitted by b'mishre' 
b'Mapbox Android SDK uses Broadcast Receiver instead of Local Broadcast Manager'

21 Mar 2017

b'Gratipay' disclosed a bug submitted by b'edio' 
b'Content-Length restriction bypass to heap overflow in gip.rocks.'

20 Mar 2017

b'Uber' disclosed a bug submitted by b'solardiz' 
b"pam-ussh may be tricked into using another logged in user's ssh-agent"

20 Mar 2017

b'Gratipay' disclosed a bug submitted by b's_p_q_r' 
b'Avoid "resend verification email" confusion'

20 Mar 2017

b'ok.ru' disclosed a bug submitted by b'4lemon' 
b'Stored XSS ? ????? ????? (2) ?? ????????? ?????.'

20 Mar 2017

1 ... 568 569 570 571 572 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM