Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Cuvva' disclosed a bug submitted by b'leet-boy' 
b'Missing rate limit on https://underwriter.partner.cuvva.com/login/verify'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'streaak' 
b'Missing Rate limiting on https://underwriter.partner.cuvva.com/login'

27 May 2017

b'Cuvva' disclosed a bug submitted by b'bhumish' 
b'Verification code for Underwriter dashboard can be brute-forced'

27 May 2017

b'BrickFTP' disclosed a bug submitted by b'xanderi' 
b'CSRF @ configuration '

27 May 2017

b'Maximum' disclosed a bug submitted by b'jorik' 
b"Possible to view and takeover other user's education and courses @ mijn.werkenbijdefensie.nl"

27 May 2017

b'Maximum' disclosed a bug submitted by b'jorik' 
b'Possible to unsubscribe from activities using CSRF @ mijn.werkenbijdefensie.nl'

27 May 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'a0xnirudh' 
b'Reflected File Download in community.ubnt.com/restapi/'

27 May 2017

b'Twitter' disclosed a bug submitted by b'rbcafe' 
b'[??????????.gnip.com] .htpasswd disclosure'

26 May 2017

b'Uber' disclosed a bug submitted by b'hurthearts' 
b'Session not expired When logout [partners.uber.com]'

26 May 2017

b'Instacart' disclosed a bug submitted by b'clizsec' 
b'WordPress Authentication Denial of Service'

26 May 2017

b'WordPress' disclosed a bug submitted by b'codertom' 
b'Stored but [SELF] XSS in mercantile.wordpress.org'

26 May 2017

b'Cuvva' disclosed a bug submitted by b'cyriac' 
b'CRLF Injection [vpn.corp.cuvva.com]'

26 May 2017

b'Coinbase' disclosed a bug submitted by b'phspade' 
b'[buy.coinbase.com]Content Injection'

25 May 2017

b'Gratipay' disclosed a bug submitted by b'smziaurrashid' 
b'Gratipay Website CSP "script-scr" includes "unsafe-inline"'

25 May 2017

b'Cuvva' disclosed a bug submitted by b'zerotoone' 
b'Your two domain login email address are disclosed in '

25 May 2017

b'Cuvva' disclosed a bug submitted by b'd0rkerdevil' 
b'Clickjacking vulnerability in support-dashboard.corp.cuvva.co'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'xawdxawdx' 
b'Xss ? https://e.mail.ru/'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'khalidamin' 
b'IDOR in tender.mail.ru leading to Information Disclosure'

25 May 2017

b'Mail.Ru' disclosed a bug submitted by b'xawdxawdx' 
b'xss ?? ?????????? ??????? ??? ?? mail.ru (Cross-Site Scripting)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'Malformed SHA512 ticket DoS (CVE-2016-6302)'

25 May 2017

1 ... 581 582 583 584 585 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM