Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ubiquiti Networks' disclosed a bug submitted by b'fransrosen' 
b'Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entry'

27 Nov 2016

b'Algolia' disclosed a bug submitted by b'eboda' 
b'Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.'

27 Nov 2016

b'Harvest' disclosed a bug submitted by b'eboda' 
b'XSS on expenses attachments'

27 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'shubham' 
b'Stored XSS in unifi.ubnt.com'

26 Nov 2016

b'Harvest' disclosed a bug submitted by b'bugdiscloseguys' 
b'Editing a project (LIMITED)'

26 Nov 2016

b'ownCloud' disclosed a bug submitted by b'rhinosecuritylabs' 
b'SMB User Authentication Bypass and Persistence'

26 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'bm_666' 
b'xss on demo.nextcloud.com due to outdated version'

26 Nov 2016

b'QIWI' disclosed a bug submitted by b'kxyry' 
b'[qiwi.com] Oauth ?????? ????????'

26 Nov 2016

b'Snapchat' disclosed a bug submitted by b'marwan' 
b'Bypassing "You\'ve requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue" '

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'Angular injection in the profile name of onpatient'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can access full wdcalendar feed'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can create, edit, delete favorite prescriptions /erx/'

25 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] Deleting other users comment'

24 Nov 2016

b'Ian Dunn' disclosed a bug submitted by b'ravenbugbounty' 
b'No CAPTCHA ia exist in pages'

23 Nov 2016

b'ownCloud' disclosed a bug submitted by b'fbogner' 
b'Arbitrary Code Injection in ownCloud\xe2\x80\x99s Windows Client'

23 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Read Application Name , Subscribers Count '

23 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b' Stored XSS(Cross Site Scripting) In Slack App Name'

22 Nov 2016

b'Imgur' disclosed a bug submitted by b'nathonsecurity' 
b'Unauthenticated Docker registry'

22 Nov 2016

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Email Attachment'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Bypass the resend limit in Send Invites'

22 Nov 2016

1 ... 575 576 577 578 579 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM