Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Legal Robot' disclosed a bug submitted by b'punkit' 
b'Clickjacking: X-Frame-Options header missing'

29 Aug 2016

b'Twitter' disclosed a bug submitted by b'secgeek' 
b'Html Injection and Possible XSS in sms-be-vip.twitter.com'

28 Aug 2016

b'New Relic' disclosed a bug submitted by b'cisplatin' 
b'User enumeration possible from log-in timing difference'

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'cisplatin' 
b'CSV Injection in sub_accounts.csv'

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'scorppy' 
b'CSRF - Regenerate all admin api keys'

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'aiacobelli' 
b'Server Side Browsing - localhost open port enumeration'

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'ashish_goanhacker' 
b'No validation on account names'

27 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'smitgajra007' 
b'Email spoofing-fake mail from your mail domain server '

27 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'spetr0x' 
b'2 vulns '

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'malcolmx' 
b'Missing rate limit on password'

26 Aug 2016

b'New Relic' disclosed a bug submitted by b'grampae' 
b'http://newrelic.com SSRF/XSPA'

26 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'fransrosen' 
b'Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'spodermen' 
b'Content Injection - demo.nextcloud.com'

26 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'hisham' 
b'Remote Code Execution (upload)'

26 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'ysx' 
b'Information Disclosure in AWS S3 Bucket'

26 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'0x00iam_hack3r' 
b'Amazon Bucket Accessible (http://legalrobot.s3.amazonaws.com/)'

26 Aug 2016

b'Moneybird' disclosed a bug submitted by b'japongskie' 
b'Logging out any user'

26 Aug 2016

b'Moneybird' disclosed a bug submitted by b'a5tronaut' 
b'Content Spoofing In Moneybird'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'spodermen' 
b'Content Injection - apps.nextcloud.com'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b'Information Disclosure of .htaccess file in Private Server/Subdomain'

26 Aug 2016

1 ... 595 596 597 598 599 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM