Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zendesk' disclosed a bug submitted by b'virtualhunter' 
b'XSS in zendesk.com/product/'

15 Dec 2016

b'Pushwoosh' disclosed a bug submitted by b'd1pakda5' 
b'Reflected Xss on '

14 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'pranav_hivarekar' 
b'Stored XSS on new Calling plugin (spreed)'

13 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'detroitsmash' 
b'Share owner has no possibility to list all existing derived shares'

13 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'rootxflood' 
b'Password reset link remains valid after email change'

13 Dec 2016

b'Uber' disclosed a bug submitted by b'fransrosen' 
b'Subdomain takeover on rider.uber.com due to non-existent distribution on Cloudfront'

12 Dec 2016

b'Twitter' disclosed a bug submitted by b'ullger' 
b'Circumventing the Twitter account lockout process [ACCOUNT TAKEOVER]'

12 Dec 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'shubham' 
b'Reflected Xss in AirMax [Nanostation Loco M2]'

12 Dec 2016

b'Twitter' disclosed a bug submitted by b'lewerkun' 
b'Information Disclosure through .DS_Store in ??????????'

12 Dec 2016

b'CERT/CC' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b'manipulate the Practical HTTP Host header '

12 Dec 2016

b'Gratipay' disclosed a bug submitted by b'edio' 
b"Gratipay uses the random module's cryptographically insecure PRNG."

12 Dec 2016

b'Mail.Ru' disclosed a bug submitted by b's_p_q_r' 
b'[torg.mail.ru] CRLF Injection'

12 Dec 2016

b'WePay' disclosed a bug submitted by b'cablej' 
b'Enumeration of registered email addresses using bruteforce search on userIds'

11 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'rooter' 
b'Option method enabled (viestinta.lahitapiola.fi)'

11 Dec 2016

b'OLX' disclosed a bug submitted by b'lucasm' 
b'stored XSS in olx.pl - ogloszenie TITLE element - moderator acc can be hacked'

11 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'shailesh4594' 
b'Open redirection protection bypass (/cs/Satellite)'

10 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'th3g3nt3lman' 
b'XSS and open redirect in verkkopalvelu.lahitapiola.fi'

10 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'HTML Injection in email /webApp/lahti (viestinta.lahitapiola.fi)'

10 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'Lahitapiola\xc2\xb4s customer names send to 3rd party'

10 Dec 2016

b'Twitter' disclosed a bug submitted by b'linkks' 
b' Cross-site scripting (reflected)'

09 Dec 2016

1 ... 588 589 590 591 592 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM