Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ok.ru' disclosed a bug submitted by b'4lemon' 
b'???????=>?????? ?????, ??????? ?? ????????????? ??? ???????'

20 Mar 2017

b'Trello' disclosed a bug submitted by b'rashedhasan007' 
b'Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com'

20 Mar 2017

b'Trello' disclosed a bug submitted by b'rashedhasan007' 
b'Email authentication token fails to expire and can be used multiple times for same Email address on Trello.com'

20 Mar 2017

b'Xero' disclosed a bug submitted by b'atik-rahman' 
b'Open-redirect on login.xero.com '

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'intricate' 
b'Open Redirect '

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'nuc' 
b'Cache purge requests are not authenticated'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'xiaulhxsnain' 
b'Session Hijacking '

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'sinkmanu' 
b'XSS in a newrelic.com site'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'kamil_hism' 
b'JIRA account misconfig causes internal info leak'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'amit29sept' 
b'CSRF - Delete all empty application policy'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'amit29sept' 
b'CSRF- delete all empty server policy'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'geeknik' 
b'https://rpm.newrelic.com/login vulnerable to host header attack'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'daniyal_nasir' 
b'No Rate Limitation on Promo Code'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'itly' 
b'Reflected XSS on Signup Page'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'apt' 
b'Unauthorized Access'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'waqar_vicky' 
b'A Signup page does not properly validate the authenticity token at the server side.'

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'waqar_vicky' 
b'A Log in page does not properly validate the authenticity token at the server side'

20 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards' 
b'Brute force unsubscription on /webApp/unsub_sb (viestinta.lahitapiola.fi)'

19 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'XSS on 3rd party service Localtapiola is using'

18 Mar 2017

b'LocalTapiola' disclosed a bug submitted by b'ahsantahir' 
b'Reflected XSS and Open Redirect (verkkopalvelu.lahitapiola.fi)'

18 Mar 2017

1 ... 569 570 571 572 573 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM