Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP' disclosed a bug submitted by b'evonide' 
b"Use After Free Vulnerability in PHP's GC algorithm and unserialize"

28 Jul 2016

b'PHP' disclosed a bug submitted by b'rc0r' 
b'Buffer overflow in HTTP url parsing functions'

28 Jul 2016

b'Imgur' disclosed a bug submitted by b'fransrosen' 
b'Reflected Flash XSS using swfupload.swf with an epileptic reloading to bypass the button-event'

28 Jul 2016

b'Moneybird' disclosed a bug submitted by b'a5tronaut' 
b'Open Redirect vulnerability in moneybird.com'

28 Jul 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Persistent XSS on public wiki pages'

27 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'shoveller' 
b'help.nextcloud.com: Known DoS condition (null pointer deref) in Nginx running'

27 Jul 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Privilege escalation to access all private groups and repositories'

27 Jul 2016

b'Uber' disclosed a bug submitted by b'jouko' 
b'Stored XSS on newsroom.uber.com admin panel / Stream WordPress plugin'

27 Jul 2016

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'[CSRF] Install premium themes '

27 Jul 2016

b'Pornhub' disclosed a bug submitted by b'static' 
b'[phpobject in cookie] Remote shell/command execution'

27 Jul 2016

b'Pornhub' disclosed a bug submitted by b'jahrek' 
b'Weak user aunthentication on mobile application - I just broken userKey secret password'

27 Jul 2016

b'Pornhub' disclosed a bug submitted by b'dremos' 
b'(Pornhub & Youporn & Brazzers ANDROID APP) : Upload Malicious APK / Overrite Existing APK / Android BackOffice Access '

27 Jul 2016

b'Bime' disclosed a bug submitted by b'jobert' 
b'Urgent: attacker can access every data source on Bime'

27 Jul 2016

b'Bime' disclosed a bug submitted by b'jobert' 
b'Attacker can access graphic representation of every query'

27 Jul 2016

b'ok.ru' disclosed a bug submitted by b'hardc0re' 
b'Multiple critical vulnerabilities in Odnoklassniki Android application'

26 Jul 2016

b'FantasyTote' disclosed a bug submitted by b'karel_origin' 
b'Betting more than max amount'

26 Jul 2016

b'QIWI' disclosed a bug submitted by b'artsploit' 
b'XML External Entity (XXE) in qiwi.com + waf bypass'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'thezawad' 
b'XSS in people.uber.com'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'blinkms' 
b'Bruteforce INVITE codes easy way'

26 Jul 2016

b'Uber' disclosed a bug submitted by b'mefkan' 
b'Brute-Forcing invite codes in partners.uber.com '

26 Jul 2016

1 ... 602 603 604 605 606 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM