Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Coinbase' disclosed a bug submitted by b'roshanpty' 
b"The 'Create a New Account' action is vulnerable to CSRF"

24 Jul 2016

b'Coinbase' disclosed a bug submitted by b'roshanpty' 
b'An adversary can overwhelm the resources by automating Forgot password/Sign Up requests'

24 Jul 2016

b'GlassWire' disclosed a bug submitted by b'xiaoyinl' 
b"Bypass GlassWire's monitoring of Hosts file"

23 Jul 2016

b'FantasyTote' disclosed a bug submitted by b'shawarkhan' 
b'Insecure password change mechanism may lead to full account takeover'

23 Jul 2016

b'FantasyTote' disclosed a bug submitted by b'ahsantahirat' 
b'No email verification required when we change email from settings'

23 Jul 2016

b'FantasyTote' disclosed a bug submitted by b'bains' 
b"Session doesn't expired after login"

23 Jul 2016

b'Uber' disclosed a bug submitted by b'netfuzzer' 
b'xss vulnerability in http://ubermovement.com/community/daniel'

21 Jul 2016

b'drchrono' disclosed a bug submitted by b's_p_q_r' 
b'Template stored XSS'

21 Jul 2016

b'ok.ru' disclosed a bug submitted by b'exploitraja' 
b'Missing proper error message.'

21 Jul 2016

b'drchrono' disclosed a bug submitted by b'cliffordtrigo' 
b'Accessing all appointments vulnerability'

21 Jul 2016

b'Mail.Ru' disclosed a bug submitted by b'c37hun' 
b'HTML Injection ?? e.mail.ru'

20 Jul 2016

b'Mail.Ru' disclosed a bug submitted by b'malcolmx' 
b'Cross Site Request Forgery (CSRF)'

20 Jul 2016

b'Gratipay' disclosed a bug submitted by b'sh4dow' 
b'Username .. (double dot) should be restricted or handled carefully'

20 Jul 2016

b'LeaseWeb' disclosed a bug submitted by b'arbaz_hussain' 
b'Directory Listening'

20 Jul 2016

b'Gratipay' disclosed a bug submitted by b'jackds' 
b'limit HTTP methods on other domains'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'bugdiscloseguy' 
b'Read-only share recipient can restore old versions of file'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'detroitsmash' 
b"Uploading files to a folder where invited user don't have any EDIT privilege"

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'fransrosen' 
b"Stored XSS on Share-popup of a directory's Gallery-view"

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'apok' 
b'Log pollution can lead to HTML Injection.'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'ishahriyar' 
b'Nextcloud server software: Content Spoofing'

19 Jul 2016

1 ... 604 605 606 607 608 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM