Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Uber for Business Allows Administrators to Change Uber Driver Ratings Due to Failure to Authenticate `fast-rating` Endpoint '

26 Jul 2016

b'Uber' disclosed a bug submitted by b'cyber__sec' 
b'Self-XSS on partners.uber.com'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'josephjose96' 
b'XSS via password recovering'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'punkit' 
b'Defect-Security | Driver-Broken Authentication | Able to update the Subscription Setting anonymously'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'bugs3ra' 
b'User credentials are not strong on vault.uber.com'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'zombiehelp54' 
b'XSS in uber oauth'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'severus' 
b'Can add employee in business.uber.com without add payment method'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'vivek_patil' 
b'Text Only Content Spoofing on ubermovement.com Community Page'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'siddiki' 
b'Requested and received edit access to Google form'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'rojanr' 
b'Subdomain takeover of translate.uber.com, de.uber.com and fr.uber.com'

25 Jul 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'Uber is Flooding my Mobile with SMS Daily like a cron JOB'

25 Jul 2016

b'Uber' disclosed a bug submitted by b'netfuzzer' 
b'xss in https://www.uber.com'

25 Jul 2016

b'Uber' disclosed a bug submitted by b'orange' 
b'SQL Injection on sctrack.email.uber.com.cn'

25 Jul 2016

b'OLX' disclosed a bug submitted by b'hacklikeapro' 
b'xss yaman.olx.ph'

25 Jul 2016

b'Ian Dunn' disclosed a bug submitted by b'ahsantahirat' 
b'CSRF in changing settings of Basic Google Maps Placemarks'

25 Jul 2016

b'Urban Dictionary' disclosed a bug submitted by b'rchase' 
b'Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation'

24 Jul 2016

b'Gratipay' disclosed a bug submitted by b'roshanpty' 
b'User Supplied links on profile page is not validated and redirected via gratipay.'

24 Jul 2016

b'Binary.com' disclosed a bug submitted by b'roshanpty' 
b"HTML injection via 'underlying' parameter"

24 Jul 2016

b'Coinbase' disclosed a bug submitted by b'roshanpty' 
b"The 'Create a New Account' action is vulnerable to CSRF"

24 Jul 2016

b'Coinbase' disclosed a bug submitted by b'roshanpty' 
b'An adversary can overwhelm the resources by automating Forgot password/Sign Up requests'

24 Jul 2016

1 ... 581 582 583 584 585 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM