Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Ability to access all user authentication tokens, leads to RCE'

03 Nov 2016

b'Blockchain' disclosed a bug submitted by b'lewerkun' 
b'Information disclosure at https://blockchain.atlassian.net'

03 Nov 2016

b'New Relic' disclosed a bug submitted by b'seifelsallamy' 
b'Open redirection '

03 Nov 2016

b'Brave Software' disclosed a bug submitted by b'scorpyo' 
b'[website] Script injection in newsletter signup https://brave.com/brave_youth_program_signup.html'

03 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'hackerone_hero' 
b'DMARC Not found for paragonie.com URGENT'

03 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'sstok' 
b'Not clearing hex-decoded variable after usage in Authentication'

03 Nov 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Read files on application server, leads to RCE'

03 Nov 2016

b'OLX' disclosed a bug submitted by b'yashmaurya' 
b'Reflected XSS in OLX.in'

02 Nov 2016

b'Informatica' disclosed a bug submitted by b'zephrfish' 
b'[oneclickdrsfdc-test.informatica.com] Tomcat Example Scripts Exposed Unauthenticated'

02 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'elamaran619' 
b'[Thirdparty]\xc2\xa0Stored XSS in chat module - nextcloud server 9.0.51 installed in ubuntu 14.0.4 LTS'

02 Nov 2016

b'ownCloud' disclosed a bug submitted by b'bobrov' 
b'[api.owncloud.org] CRLF Injection'

02 Nov 2016

b'ownCloud' disclosed a bug submitted by b'bobrov' 
b'[doc.owncloud.org] CRLF Injection'

02 Nov 2016

b'leetfiles' disclosed a bug submitted by b'bobrov' 
b'[leetfil.es] MSIE, Edge XSS via Request-URI'

02 Nov 2016

b'Dropbox' disclosed a bug submitted by b'bobrov' 
b'[monitor.sjc.dropbox.com] CRLF Injection'

02 Nov 2016

b'Greenhouse.io' disclosed a bug submitted by b'bobrov' 
b'[greenhouse.io] CRLF Injection / Insecure nginx configuration'

02 Nov 2016

b'Mail.Ru' disclosed a bug submitted by b'murthysagi' 
b'Mail.ru for Android Content Provider Vulnerability'

02 Nov 2016

b'Harvest' disclosed a bug submitted by b'vagg-a-bond' 
b'Project Disclosure of all Harvest Instances'

01 Nov 2016

b'Slack' disclosed a bug submitted by b'procode701' 
b'Email information leakage for certain addresses'

31 Oct 2016

b'Boozt Fashion AB' disclosed a bug submitted by b'inhibitor181' 
b"Make victim buy in attacker's account without any idea - http://www.booztlet.com/"

31 Oct 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'hextitan' 
b'[Airship CMS] Local File Inclusion - RST Parser'

31 Oct 2016

1 ... 605 606 607 608 609 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM