Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Weblate' disclosed a bug submitted by b'd04k34d3v1l' 
b'demo.weblate.org is vulnerable to SWEET32 Vulnerability'

17 May 2017

b'Weblate' disclosed a bug submitted by b'mrr3boot' 
b'Improper Password Reset Policy on https://hosted.weblate.org/'

17 May 2017

b'Weblate' disclosed a bug submitted by b'ant_pyne' 
b'No Password Length Restriction leads to Denial of Service'

17 May 2017

b'Weblate' disclosed a bug submitted by b'pavanw3b' 
b'Email verification over an unencrypted channel'

17 May 2017

b'Weblate' disclosed a bug submitted by b'phspade' 
b'No Rate Limitting at Change Password'

17 May 2017

b'Weblate' disclosed a bug submitted by b'kv_mishal' 
b'full path disclosure at hosted.weblate.org/admin/accounts/profile/ '

17 May 2017

b'Weblate' disclosed a bug submitted by b'jaysairam' 
b'Improper access control when an added email address is deleted from authentication'

17 May 2017

b'Weblate' disclosed a bug submitted by b'ansariosama' 
b'Account Takeover using Third party Auth CSRF'

17 May 2017

b'ownCloud' disclosed a bug submitted by b'wester' 
b'password reset email spamming'

17 May 2017

b'PortSwigger Web Security' disclosed a bug submitted by b'cybr0' 
b'Misconfiguration: Missing Custom Error Page (CWE-12 & CWE-756)'

16 May 2017

b'Legal Robot' disclosed a bug submitted by b'd04k34d3v1l' 
b'content spoofing'

16 May 2017

b'Nextcloud' disclosed a bug submitted by b'sinkmanu' 
b'Reflected XSS in error pages (NC-SA-2017-008)'

15 May 2017

b'Starbucks' disclosed a bug submitted by b'inhibitor181' 
b'Persistent CSRF in /GiftCert-AddToBasket prevents purchases on eCommerce sites'

15 May 2017

b'Starbucks' disclosed a bug submitted by b'josephjose96' 
b'CSRF vulnerability in saving payment card on store.starbucks.com (COBilling -AddCreditCard)'

15 May 2017

b'Pornhub' disclosed a bug submitted by b'aghora' 
b'Reflected XSS in login redirection module'

15 May 2017

b'Veris' disclosed a bug submitted by b'd04k34d3v1l' 
b'SSL/TLS BEAST ATTACK VULNERABILITY '

15 May 2017

b'Nextcloud' disclosed a bug submitted by b'wester' 
b'Possible SSRF in email server settings(SMTP mode)'

15 May 2017

b'Nextcloud' disclosed a bug submitted by b'wester' 
b'Content (Text) Injection at https://nextcloud.com'

15 May 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV - mark_context_stack'

13 May 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGABRT - mirb and mruby'

13 May 2017

1 ... 591 592 593 594 595 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM