Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Nginx server version disclosure'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'htaccess file is accesible'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Spoof Email with Hyperlink Injection via Invites functionality'

14 Nov 2016

b'Brave Software' disclosed a bug submitted by b'bibo' 
b'2 Directory Listing on ledger.brave.com & vault-staging.brave.com'

13 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ak1t4' 
b'Email Server Compromised at secure.lahitapiola.fi'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing rel=noopener noreferrer in target=_blank links (Phishing attack)'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Incorrect detection of onion URLs'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Not using Binary::safe* functions for substr/strlen function'

13 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] post to anyone even if their stream is restricted to friends only'

11 Nov 2016

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'race condition in adding team members'

10 Nov 2016

b'Badoo' disclosed a bug submitted by b'c0rte' 
b'No rate-limit in SERVER_SECURITY_CHECK'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ng1' 
b'Content Spoofing or Text Injection (404 error page injection)'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'tsug0d' 
b'Reflected XSS in LTContactFormReceiver (/cs/Satellite)'

10 Nov 2016

b'Eobot' disclosed a bug submitted by b'mr_sharma_' 
b'No password length restriction'

10 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Using plain git protocol (vulnerable to MITM)'

09 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing GIT tag/commit verification in Docker'

09 Nov 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service(POP UP Recursion) on Brave browser'

07 Nov 2016

b'Pornhub' disclosed a bug submitted by b'vijay_kumar1110' 
b'[idor] Unauthorized Read access to all the private posts(Including Photos,Videos,Gifs)'

05 Nov 2016

b'New Relic' disclosed a bug submitted by b'hogarth45' 
b'Emails and alert policies can be altered by malicious users.'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'pavanw3b' 
b'Host Header Injection / Cache Poisoning'

04 Nov 2016

1 ... 589 590 591 592 593 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM