Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'7h0r4pp4n' 
b'CSRF Token Bypass in Account Deletion'

20 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'wester' 
b'The email API to reset password is unlimited and can be used as a email bomb'

20 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'pradeepch99' 
b'failure to invalidate session on password change'

20 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'amirisme' 
b'Information disclosure'

20 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'wrench' 
b'SSRF at apps.nextcloud.com/developer/apps/releases/new'

20 Apr 2017

b'YouPorn' disclosed a bug submitted by b'almaco' 
b'Time Based SQL-inject in post-parametr login[username] [domain - youporn.com]'

20 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'dr-cdqh' 
b'GIT Detected'

20 Apr 2017

b'WordPress' disclosed a bug submitted by b'j3-' 
b'Administrator(s) Information disclosure via JSON on wordpress.org'

19 Apr 2017

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b'HackerOne is still prone to Internet Explorer UXSS'

19 Apr 2017

b'Informatica' disclosed a bug submitted by b's_p_q_r' 
b'[marketplace.informatica.com] Profile stored XSS'

19 Apr 2017

b'VK.com' disclosed a bug submitted by b'mandy1394' 
b'Missing Server Side Rate Limiting can Lead to VK Account Take over '

19 Apr 2017

b'Homebrew' disclosed a bug submitted by b'mrr3boot' 
b'Stack Trace on jenkins.brew.sh'

19 Apr 2017

b'Homebrew' disclosed a bug submitted by b'neutrinoguy' 
b'Server version disclosure on [jenkins.brew.sh]'

19 Apr 2017

b'ownCloud' disclosed a bug submitted by b'alykode' 
b'User Information Disclosure via REST API'

19 Apr 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'alykode' 
b'200 http code in 403 forbidden directories on main Ubnt.com domain'

19 Apr 2017

b'GlobaLeaks' disclosed a bug submitted by b'secure_world' 
b'Information Disclosure'

19 Apr 2017

b'Homebrew' disclosed a bug submitted by b'zephrfish' 
b'[https://jenkins.brew.sh] Jenkins in Debug Mode with Stack Traces Enabled'

19 Apr 2017

b'Homebrew' disclosed a bug submitted by b'smit' 
b'Host header Injection'

19 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'hanno' 
b'bug reporting template encourages users to paste config file with passwords'

19 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'icanthack' 
b'SIGSEGV - mrb_obj_value'

19 Apr 2017

1 ... 598 599 600 601 602 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM