Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Harvest' disclosed a bug submitted by b'bugdiscloseguys' 
b'Editing a project (LIMITED)'

26 Nov 2016

b'ownCloud' disclosed a bug submitted by b'rhinosecuritylabs' 
b'SMB User Authentication Bypass and Persistence'

26 Nov 2016

b'Nextcloud' disclosed a bug submitted by b'bm_666' 
b'xss on demo.nextcloud.com due to outdated version'

26 Nov 2016

b'QIWI' disclosed a bug submitted by b'kxyry' 
b'[qiwi.com] Oauth ?????? ????????'

26 Nov 2016

b'Snapchat' disclosed a bug submitted by b'marwan' 
b'Bypassing "You\'ve requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue" '

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'Angular injection in the profile name of onpatient'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can access full wdcalendar feed'

25 Nov 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'User with no permissions can create, edit, delete favorite prescriptions /erx/'

25 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] Deleting other users comment'

24 Nov 2016

b'Ian Dunn' disclosed a bug submitted by b'ravenbugbounty' 
b'No CAPTCHA ia exist in pages'

23 Nov 2016

b'ownCloud' disclosed a bug submitted by b'fbogner' 
b'Arbitrary Code Injection in ownCloud\xe2\x80\x99s Windows Client'

23 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Read Application Name , Subscribers Count '

23 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b' Stored XSS(Cross Site Scripting) In Slack App Name'

22 Nov 2016

b'Imgur' disclosed a bug submitted by b'nathonsecurity' 
b'Unauthenticated Docker registry'

22 Nov 2016

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Email Attachment'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Bypass the resend limit in Send Invites'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'dem0n' 
b' Spam Some one using (user.saveInvite) system'

22 Nov 2016

b'bitaccess' disclosed a bug submitted by b'raghu42' 
b'Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error. '

21 Nov 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open redirect and XSS in supporthiring.shopify.com'

21 Nov 2016

b'HackerOne' disclosed a bug submitted by b'sasi2103' 
b'Researcher gets email updates on a private program after he/she quits that program.'

21 Nov 2016

1 ... 606 607 608 609 610 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM