Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'lewerkun' 
b'Access to Splunk at https://apt.ec2.shopify.com:8089'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open Redirect after login at http://ecommerce.shopify.com'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b"(FULL PATH DISCLOSURE) Unknown MySQL server host 'shardm-reader.chi2.shopify.io' "

01 Sep 2016

b'OLX' disclosed a bug submitted by b'exception' 
b'[Critical] Delete any account '

01 Sep 2016

b'Gratipay' disclosed a bug submitted by b'exception' 
b'XSS Via Method injection'

01 Sep 2016

b'Algolia' disclosed a bug submitted by b'xenon' 
b'[github.algolia.com] XSS'

01 Sep 2016

b'Automattic' disclosed a bug submitted by b'psych0tr1a' 
b'[bbPress] Stored XSS in any forum post.'

01 Sep 2016

b'HackerOne' disclosed a bug submitted by b'kirils' 
b'Disclosure of external users invited to a specific report'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'apara' 
b'View all deleted comments and rating of any app .'

01 Sep 2016

b'Slack' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs'

01 Sep 2016

b'ownCloud' disclosed a bug submitted by b'himanshu_mehta' 
b'ownCloud 2.2.2.6192 DLL Hijacking Vulnerability'

31 Aug 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'Open Redirect possible in https://www.shopify.com/admin/'

31 Aug 2016

b'LocalTapiola' disclosed a bug submitted by b'rojanr' 
b'DOM XSS bypassing in Regional Office -selector'

31 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'sivakumar88' 
b'Reflected Self-XSS Vulnerability in the Comment section of Files (Different-payloads)'

31 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'punkit' 
b' Legal | Application is Missing CSP(Content Security Policy) Header '

31 Aug 2016

b'drchrono' disclosed a bug submitted by b'7seciq' 
b'Request Accepts without X-CSRFToken [ Header - Cookie ]'

31 Aug 2016

b'drchrono' disclosed a bug submitted by b'7seciq' 
b'CSRF Add Album On onpatient.com '

31 Aug 2016

b'Square Open Source' disclosed a bug submitted by b'nvolcz' 
b'Cache poisoning for okhttp '

31 Aug 2016

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'Cookie-based client-side denial-of-service to all of the L\xc3\xa4hitapiola domains'

30 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b'Content spoofing in cloud.nextcloud.com'

30 Aug 2016

1 ... 593 594 595 596 597 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM