Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OWOX, Inc.' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS at https://finance.owox.com/customer/accountList'

12 Feb 2017

b'Nextcloud' disclosed a bug submitted by b'raunak2002' 
b'User Information Disclosure via REST API'

11 Feb 2017

b'Algolia' disclosed a bug submitted by b'no_thing' 
b'Reflected XSS'

11 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'yasar' 
b'SQL Injection /webApp/cancel_iltakoulu regId parameter (viestinta.lahitapiola.fi)'

11 Feb 2017

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service attack on Brave Browser.'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV Null Pointer mrb_str_concat()'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV mrb_obj_freeze() Manipulating Register RAX and RSI'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ston3' 
b'SIGSEGV on mruby mrb_get_args() '

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ahihi' 
b'heap-buffer-overflow on mruby'

10 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'mg36' 
b'mrb_vformat() heap overflow could lead to code execution'

10 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'3p1c' 
b'SQL Injection on /webApp/lapsuudenturva (viestinta.lahitapiola.fi)'

10 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'3p1c' 
b'SQL Injection on /webApp/viivanalle (viestinta.lahitapiola.fi)'

10 Feb 2017

b'LocalTapiola' disclosed a bug submitted by b'3p1c' 
b'Sql injection on /webApp/sijoituswebinaari (viestinta.lahitapiola.fi)'

10 Feb 2017

b'Nextcloud' disclosed a bug submitted by b'ph_spade' 
b'Missing SPF Flags on nextcloud.com'

10 Feb 2017

b'VK.com' disclosed a bug submitted by b'kicker' 
b'HTML Injection possible due to bad filter'

10 Feb 2017

b'Uber' disclosed a bug submitted by b'uranium238' 
b'Authorization issue in Google G Suite allows DoS through HTTP redirect'

09 Feb 2017

b'leetfiles' disclosed a bug submitted by b'0xnop' 
b'XSS in content type header when uploading file.'

09 Feb 2017

b'Harvest' disclosed a bug submitted by b'bagipro' 
b'Possible to steal any protected files on Android'

09 Feb 2017

b'VK.com' disclosed a bug submitted by b'firex' 
b'SSRF (open) - via GET request'

09 Feb 2017

b'VK.com' disclosed a bug submitted by b'irek' 
b'XSS ? upload.php'

09 Feb 2017

1 ... 598 599 600 601 602 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM