Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'Lahitapiola\xc2\xb4s customer names send to 3rd party'

10 Dec 2016

b'Twitter' disclosed a bug submitted by b'linkks' 
b' Cross-site scripting (reflected)'

09 Dec 2016

b'Informatica' disclosed a bug submitted by b'robd4k' 
b'[now.informatica.com] Reflective XSS'

09 Dec 2016

b'Informatica' disclosed a bug submitted by b'yarbabin' 
b'[marketplace.informatica.com] - XXE'

09 Dec 2016

b'Informatica' disclosed a bug submitted by b'yarbabin' 
b'[marketplace.informatica.com] - XXE'

09 Dec 2016

b'Informatica' disclosed a bug submitted by b'yarbabin' 
b'[rev-app.informatica.com] - XXE via SAML'

09 Dec 2016

b'Envoy' disclosed a bug submitted by b'zephrfish' 
b'Abuse of API can Lead to DoS'

08 Dec 2016

b'Informatica' disclosed a bug submitted by b'zephrfish' 
b'[product360.informatica.com] Unauthenticated Apache Tomcat 8 Installation'

08 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'SQL Injection /webApp/sijoitustalous_peruutus locId parameter (viestinta.lahitapiola.fi)'

08 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'SQL Injection /webApp/oma_conf ctx parameter (viestinta.lahitapiola.fi)'

08 Dec 2016

b'HackerOne' disclosed a bug submitted by b'zseano' 
b'Bypass rate limiting on /users/password (possibly site-wide rate limit bypass?)'

08 Dec 2016

b'OLX' disclosed a bug submitted by b'123456789100' 
b'REFLECTED CROSS SITE SCRIPTING IN OLX'

08 Dec 2016

b'Gratipay' disclosed a bug submitted by b'promx' 
b'CSRF csrftoken in cookies'

07 Dec 2016

b'Instacart' disclosed a bug submitted by b'archers123' 
b'User Information sent to client through websockets'

07 Dec 2016

b'PortSwigger Web Security' disclosed a bug submitted by b'jelmer' 
b'JSBeautifier BApp: Race condition leads to memory disclosure'

07 Dec 2016

b'Trello' disclosed a bug submitted by b'esmile' 
b'SVG Uploads / Attachments can be viewed by anyone. '

06 Dec 2016

b'GitLab' disclosed a bug submitted by b'fransrosen' 
b'Mailgun misconfiguration leads to email snooping and postmaster@-access on email.mg.gitlab.com'

06 Dec 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'State filter in IssuableFinder allows attacker to delete all issues and merge requests'

06 Dec 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'benkhlifafahmi' 
b'account.ubnt.com CSRF'

05 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b"[Nextcloud 9.0.53] Content Spoofing in 'trustDomain' parameter"

05 Dec 2016

1 ... 572 573 574 575 576 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM