Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zendesk' disclosed a bug submitted by b'gribdan' 
b'AWS S3 bucket writable for authenticated aws user'

29 Nov 2016

b'Shopify' disclosed a bug submitted by b'clarck-owen' 
b'Able to Login deactivated staff account in shopify app mobile'

29 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'arneswinnen' 
b'Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com'

29 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'vibhuti_i' 
b'IDOR Causing Deletion of any account'

29 Nov 2016

b'HackerOne' disclosed a bug submitted by b'faisalahmed' 
b'Partial disclosure of report activity through new "Export as .zip" feature'

29 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b'Rate-limit bypass'

28 Nov 2016

b'Coinbase' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b'Application error message'

28 Nov 2016

b'Coinbase' disclosed a bug submitted by b'punkrock' 
b'Window.opener bug at www.coinbase.com'

28 Nov 2016

b'Coinbase' disclosed a bug submitted by b'xorgin' 
b'Information leakage on https://docs.gdax.com'

28 Nov 2016

b'Coinbase' disclosed a bug submitted by b'kaleemgiet' 
b'ByPassing the email Validation Email on Sign up process in mobile apps'

28 Nov 2016

b'Informatica' disclosed a bug submitted by b'strukt' 
b'[kb.informatica.com] Unauthenticated emails and HTML injection in email messages'

28 Nov 2016

b'Veris' disclosed a bug submitted by b'mr_sharma_' 
b'Reflected Cross site scripting'

28 Nov 2016

b'Twitter' disclosed a bug submitted by b'bains' 
b'XSS using javascript:alert(8007)'

28 Nov 2016

b'DigitalSellz' disclosed a bug submitted by b'sameoldstory' 
b'Access to Amazon S3 bucket'

27 Nov 2016

b'DigitalSellz' disclosed a bug submitted by b'robin_linus' 
b'Public profile is vulnerable to stored XSS / Facebook Token can be stolen'

27 Nov 2016

b'DigitalSellz' disclosed a bug submitted by b'skorov' 
b'AWS Signature Disclosure in www.digitalsellz.com allows FULL access to Amazon S3'

27 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'fransrosen' 
b'Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entry'

27 Nov 2016

b'Algolia' disclosed a bug submitted by b'eboda' 
b'Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.'

27 Nov 2016

b'Harvest' disclosed a bug submitted by b'eboda' 
b'XSS on expenses attachments'

27 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'shubham' 
b'Stored XSS in unifi.ubnt.com'

26 Nov 2016

1 ... 605 606 607 608 609 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM