Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Snapchat' disclosed a bug submitted by b'marwan' 
b'Bypassing "You\'ve requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue" '

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'Angular injection in the profile name of onpatient'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can access full wdcalendar feed'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can create, edit, delete favorite prescriptions /erx/'

25 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] Deleting other users comment'

24 Nov 2016

b'Ian Dunn' disclosed a bug submitted by b'ravenbugbounty' 
b'No CAPTCHA ia exist in pages'

23 Nov 2016

b'ownCloud' disclosed a bug submitted by b'fbogner' 
b'Arbitrary Code Injection in ownCloud\xe2\x80\x99s Windows Client'

23 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Read Application Name , Subscribers Count '

23 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b' Stored XSS(Cross Site Scripting) In Slack App Name'

22 Nov 2016

b'Imgur' disclosed a bug submitted by b'nathonsecurity' 
b'Unauthenticated Docker registry'

22 Nov 2016

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Email Attachment'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Bypass the resend limit in Send Invites'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'dem0n' 
b' Spam Some one using (user.saveInvite) system'

22 Nov 2016

b'bitaccess' disclosed a bug submitted by b'raghu42' 
b'Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error. '

21 Nov 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open redirect and XSS in supporthiring.shopify.com'

21 Nov 2016

b'HackerOne' disclosed a bug submitted by b'sasi2103' 
b'Researcher gets email updates on a private program after he/she quits that program.'

21 Nov 2016

b'Slack' disclosed a bug submitted by b'linkks' 
b'RC4 cipher suites detected on status.slack.com'

18 Nov 2016

b'Instacart' disclosed a bug submitted by b'sameoldstory' 
b'Full access to any list'

18 Nov 2016

b'VK.com' disclosed a bug submitted by b'linkks' 
b'????'

18 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Nginx version disclosure via response header'

18 Nov 2016

1 ... 587 588 589 590 591 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM