Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Incorrect detection of onion URLs'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Not using Binary::safe* functions for substr/strlen function'

13 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] post to anyone even if their stream is restricted to friends only'

11 Nov 2016

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'race condition in adding team members'

10 Nov 2016

b'Badoo' disclosed a bug submitted by b'c0rte' 
b'No rate-limit in SERVER_SECURITY_CHECK'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ng1' 
b'Content Spoofing or Text Injection (404 error page injection)'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'tsug0d' 
b'Reflected XSS in LTContactFormReceiver (/cs/Satellite)'

10 Nov 2016

b'Eobot' disclosed a bug submitted by b'mr_sharma_' 
b'No password length restriction'

10 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Using plain git protocol (vulnerable to MITM)'

09 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing GIT tag/commit verification in Docker'

09 Nov 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service(POP UP Recursion) on Brave browser'

07 Nov 2016

b'Pornhub' disclosed a bug submitted by b'vijay_kumar1110' 
b'[idor] Unauthorized Read access to all the private posts(Including Photos,Videos,Gifs)'

05 Nov 2016

b'New Relic' disclosed a bug submitted by b'hogarth45' 
b'Emails and alert policies can be altered by malicious users.'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'pavanw3b' 
b'Host Header Injection / Cache Poisoning'

04 Nov 2016

b'New Relic' disclosed a bug submitted by b'cjlegacion' 
b'Cookie Misconfiguration'

04 Nov 2016

b'Algolia' disclosed a bug submitted by b'punkrock' 
b'Possilbe Sub Domain takever at prestashop.algolia.com'

04 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'lmx' 
b'More content spoofing through dir param in the files app'

04 Nov 2016

b'CodeIgniter' disclosed a bug submitted by b'syndr0me' 
b'Link sanitation bypass in xss_clean() '

04 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kholy' 
b'BAD Code ! '

04 Nov 2016

b'Instacart' disclosed a bug submitted by b'michiel' 
b'Authorization Bypass in Delivery Chat Logs'

03 Nov 2016

1 ... 604 605 606 607 608 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM