Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'imran_hadid' 
b'Store XSS'

01 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Files Drop: WebDAV endpoint is leaking existence of resources'

01 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'top' 
b'Server version disclosure'

31 Dec 2016

b'Legal Robot' disclosed a bug submitted by b'nullelite' 
b' No DMARC Record in legalrobot-uat.com'

31 Dec 2016

b'InVision' disclosed a bug submitted by b'nhavis' 
b'CORS Man-in-the-Middle account compromise'

31 Dec 2016

b'Informatica' disclosed a bug submitted by b'zephrfish' 
b'[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible'

31 Dec 2016

b'OpenSSL (IBB)' disclosed a bug submitted by b'guido' 
b'Double-free in X509 parsing'

30 Dec 2016

b'OpenSSL (IBB)' disclosed a bug submitted by b'guido' 
b'Remote client memory corruption in ssl_add_clienthello_tlsext()'

30 Dec 2016

b'Gratipay' disclosed a bug submitted by b'akash_9021' 
b'Username can be used to trick the victim on the name of www.gratipay.com'

30 Dec 2016

b'Gratipay' disclosed a bug submitted by b'akash_9021' 
b'Username Restriction is not applied for reserved folders'

30 Dec 2016

b'Ian Dunn' disclosed a bug submitted by b'e3amn2l' 
b'unchecked unserialize usages in audit-trail-extension/audit-trail-extension.php'

30 Dec 2016

b'Ian Dunn' disclosed a bug submitted by b'e3amn2l' 
b'constant cache_page_secret in regolith'

30 Dec 2016

b'Gratipay' disclosed a bug submitted by b'aa23' 
b'Session Fixation At Logout /Session Misconfiguration'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Secure Pages Include Mixed Content'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Certificate signed using SHA-1'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Cookie HttpOnly Flag Not Set '

29 Dec 2016

b'Phabricator' disclosed a bug submitted by b'e3amn2l' 
b'Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)'

29 Dec 2016

b'VK.com' disclosed a bug submitted by b'canamii' 
b'vk.com/login.php '

29 Dec 2016

b'Ian Dunn' disclosed a bug submitted by b'e3amn2l' 
b'unchecked unserialize usage in WordPress-Functionality-Plugin-Skeleton/functionality-plugin-skeleton.php'

29 Dec 2016

b'Trello' disclosed a bug submitted by b'thalaivarsubu' 
b'The contact page is vulnerable to self-XSS via upload file name'

28 Dec 2016

1 ... 585 586 587 588 589 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM