Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Eobot' disclosed a bug submitted by b'mr_sharma_' 
b'No password length restriction'

10 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Using plain git protocol (vulnerable to MITM)'

09 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing GIT tag/commit verification in Docker'

09 Nov 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service(POP UP Recursion) on Brave browser'

07 Nov 2016

b'Pornhub' disclosed a bug submitted by b'vijay_kumar1110' 
b'[idor] Unauthorized Read access to all the private posts(Including Photos,Videos,Gifs)'

05 Nov 2016

b'New Relic' disclosed a bug submitted by b'hogarth45' 
b'Emails and alert policies can be altered by malicious users.'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'pavanw3b' 
b'Host Header Injection / Cache Poisoning'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'cjlegacion' 
b'Cookie Misconfiguration'

04 Nov 2016

b'Algolia' disclosed a bug submitted by b'punkrock' 
b'Possilbe Sub Domain takever at prestashop.algolia.com'

04 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'lmx' 
b'More content spoofing through dir param in the files app'

04 Nov 2016

b'CodeIgniter' disclosed a bug submitted by b'syndr0me' 
b'Link sanitation bypass in xss_clean() '

04 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kholy' 
b'BAD Code ! '

04 Nov 2016

b'Instacart' disclosed a bug submitted by b'michiel' 
b'Authorization Bypass in Delivery Chat Logs'

03 Nov 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Ability to access all user authentication tokens, leads to RCE'

03 Nov 2016

b'Blockchain' disclosed a bug submitted by b'lewerkun' 
b'Information disclosure at https://blockchain.atlassian.net'

03 Nov 2016

b'New Relic' disclosed a bug submitted by b'seifelsallamy' 
b'Open redirection '

03 Nov 2016

b'Brave Software' disclosed a bug submitted by b'scorpyo' 
b'[website] Script injection in newsletter signup https://brave.com/brave_youth_program_signup.html'

03 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'hackerone_hero' 
b'DMARC Not found for paragonie.com URGENT'

03 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'sstok' 
b'Not clearing hex-decoded variable after usage in Authentication'

03 Nov 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Read files on application server, leads to RCE'

03 Nov 2016

1 ... 578 579 580 581 582 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM