Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'meals' 
b'Java Deserialization RCE via JBoss JMXInvokerServlet/EJBInvokerServlet on card.starbucks.in'

03 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'eeko' 
b'Suspicious browser fingerprinting(?) scripts on http://www.lahitapiola.fi/ redirector'

03 Feb 2017

b'Twitter' disclosed a bug submitted by b'akhil-reni' 
b'Stealing User emails by clickjacking cards.twitter.com/xxx/xxx'

03 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'Multiple Reflected XSS /webApp/lahti (viestinta.lahitapiola.fi)'

03 Feb 2017

b'Trello' disclosed a bug submitted by b'dhaval' 
b'Full Sub Domain Takeover at help.trello.com.'

02 Feb 2017

b'Automattic' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'cloudup Subdomain Takeover That resolves to Desk.com ( CNAME cloudup.desk.com ) '

02 Feb 2017

b'Pushwoosh' disclosed a bug submitted by b'falldi' 
b'Clickjacking'

02 Feb 2017

b'WebSummit' disclosed a bug submitted by b'dhaval' 
b'Full Sub Domain Takeover at s3.websummit.net'

02 Feb 2017

b'Coinbase' disclosed a bug submitted by b'japzdivino' 
b'Requestor Email Disclosure via Email Notification'

02 Feb 2017

b'Informatica' disclosed a bug submitted by b'kasperkarlsson' 
b'[marketplace.informatica.com] Persistent XSS through document title'

02 Feb 2017

b'Legal Robot' disclosed a bug submitted by b'pkkothawade' 
b'SWEET32 TLS attack'

01 Feb 2017

b'Phabricator' disclosed a bug submitted by b'lucasveigaf' 
b'User with only Viewing Privilege can send message to Room'

01 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'volc' 
b'Memory disclosure in timegm'

31 Jan 2017

b'Vimeo' disclosed a bug submitted by b'panchocosil' 
b'Securing "Reset password" pages from bots'

31 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'tunz' 
b'Use After Free in str_replace'

31 Jan 2017

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured Kibana/Elasticsearch instance'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'filedeletor1' 
b'Subdomain Takeover at http://gameday.websummit.net'

30 Jan 2017

b'WebSummit' disclosed a bug submitted by b'glc' 
b'Subdomain take over signup.websummit'

29 Jan 2017

b'LocalTapiola' disclosed a bug submitted by b'jimmyjohns' 
b'SQL Injection on /webApp/sijoitustalousuk email-parameter + potential lack of CSRF Token (viestinta.lahitapiola.fi)'

28 Jan 2017

b'Imgur' disclosed a bug submitted by b'i1ackerone_' 
b'Stored xss in ALBUM DESCRIPTION '

27 Jan 2017

1 ... 588 589 590 591 592 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM