Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WakaTime' disclosed a bug submitted by b'diti' 
b'No rate limit when creating new goals [https://wakatime.com/goals]'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'sp1d3rs' 
b'JSON CSRF on the https://api.wakatime.com/api/v1/ (example with the time logging).'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'b3nac' 
b'IDOR create accounts and verify them with original account email'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'b3nac' 
b'No redirect uri for Twitter Oath resulting in token leak'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'silv3rpoision' 
b'No notificatoin sent on email after account deletion.'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'streaak2' 
b'Two email addresses can access the same account'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'pratyushjanghel' 
b'Lack of Password Confirmation When Changing Email'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'mohammad_obaid' 
b'Forgot passwod link doesnt expire'

03 Jul 2017

b'WakaTime' disclosed a bug submitted by b'pavanw3b' 
b'Missing Account Deletion Notification'

03 Jul 2017

b'Open-Xchange' disclosed a bug submitted by b'abiral' 
b'Set Cookie Via SVG'

03 Jul 2017

b'Weblate' disclosed a bug submitted by b'pavanw3b' 
b'Bypassing captcha in registration on Hosted site'

03 Jul 2017

b'MapsMarker.com e.U.' disclosed a bug submitted by b'paulochoupina' 
b'Cross-site Scripting (XSS) in /updates-pro/archive/'

02 Jul 2017

b'Weblate' disclosed a bug submitted by b'imran_hadid' 
b'Rate Limit Issue on hosted.weblate.org'

02 Jul 2017

b'Weblate' disclosed a bug submitted by b'punkit' 
b'Weblate |Security Misconfiguration| Method Enumeration Possible on domain '

02 Jul 2017

b'WakaTime' disclosed a bug submitted by b'leet-boy' 
b'Email Spoofing Via /api/v1/users/reset_password'

01 Jul 2017

b'WakaTime' disclosed a bug submitted by b'paxtammy' 
b'Login page password - guessing attack'

01 Jul 2017

b'WakaTime' disclosed a bug submitted by b'mrreboot' 
b'Missing SPF Flags'

01 Jul 2017

b'WakaTime' disclosed a bug submitted by b'gaurang' 
b'Mailgun misconfiguration '

01 Jul 2017

b'WakaTime' disclosed a bug submitted by b'pratyushjanghel' 
b'Session Not Expired On Logout'

01 Jul 2017

b'Starbucks' disclosed a bug submitted by b'kylecolson' 
b'Lack of Controls Allowing for Card and PIN Enumeration Leading to Fraud'

01 Jul 2017

1 ... 569 570 571 572 573 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM