Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'bagipro' 
b'Android - Possible to intercept broadcasts about uploaded files'

23 Mar 2017

b'Nextcloud' disclosed a bug submitted by b'ryudox' 
b'Server version/OS type disclosure via HTTP Response Header'

23 Mar 2017

b'Blockchain' disclosed a bug submitted by b'cloudyvirus' 
b'HTTP Header Injection/HTTP_Response_Splitting'

23 Mar 2017

b'Gratipay' disclosed a bug submitted by b'valievkarim' 
b'upgrade Aspen on inside.gratipay.com to pick up CR injection fix'

22 Mar 2017

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Reflected XSS in U2F plugin by shipping the example endpoints'

22 Mar 2017

b'Xero' disclosed a bug submitted by b'4lemon' 
b'stored xss issue in folder name on go.xero.com/Docs/Folders'

21 Mar 2017

b'Whisper' disclosed a bug submitted by b'1n3' 
b'SMS Invite Form Abuse'

21 Mar 2017

b'Uber' disclosed a bug submitted by b'kazan71p' 
b'SQL injection in 3rd party software Anomali'

21 Mar 2017

b'GitLab' disclosed a bug submitted by b'edio' 
b'Gitlab.com is vulnerable to reverse tabnabbing.'

21 Mar 2017

b'Mapbox' disclosed a bug submitted by b'mishre' 
b'Mapbox Android SDK uses Broadcast Receiver instead of Local Broadcast Manager'

21 Mar 2017

b'Gratipay' disclosed a bug submitted by b'edio' 
b'Content-Length restriction bypass to heap overflow in gip.rocks.'

20 Mar 2017

b'Uber' disclosed a bug submitted by b'solardiz' 
b"pam-ussh may be tricked into using another logged in user's ssh-agent"

20 Mar 2017

b'Gratipay' disclosed a bug submitted by b's_p_q_r' 
b'Avoid "resend verification email" confusion'

20 Mar 2017

b'ok.ru' disclosed a bug submitted by b'4lemon' 
b'Stored XSS ? ????? ????? (2) ?? ????????? ?????.'

20 Mar 2017

b'ok.ru' disclosed a bug submitted by b'4lemon' 
b'???????=>?????? ?????, ??????? ?? ????????????? ??? ???????'

20 Mar 2017

b'Trello' disclosed a bug submitted by b'rashedhasan007' 
b'Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com'

20 Mar 2017

b'Trello' disclosed a bug submitted by b'rashedhasan007' 
b'Email authentication token fails to expire and can be used multiple times for same Email address on Trello.com'

20 Mar 2017

b'Xero' disclosed a bug submitted by b'atik-rahman' 
b'Open-redirect on login.xero.com '

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'intricate' 
b'Open Redirect '

20 Mar 2017

b'New Relic' disclosed a bug submitted by b'nuc' 
b'Cache purge requests are not authenticated'

20 Mar 2017

1 ... 582 583 584 585 586 ... 751

BY DENIS WERNER - @NOBBD - IMPRESSUM