Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Gratipay' disclosed a bug submitted by b'muhaddimu' 
b'Cross Site Scripting In Profile Statement '

23 Aug 2016

b'Uber' disclosed a bug submitted by b'jamesclyde' 
b"newsroom.uber.com is vulnerable to 'SOME' XSS attack via plupload.flash.swf"

22 Aug 2016

b'Coinbase' disclosed a bug submitted by b'cablej' 
b'window.opener is leaking to external domains upon redirect on Safari'

22 Aug 2016

b'Snapchat' disclosed a bug submitted by b'ebrietas' 
b'Subdomain takeover on http://fastly.sc-cdn.net/'

22 Aug 2016

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'Add tweet to collection CSRF '

22 Aug 2016

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'Urgent : Disclosure of all the apps with hash ID in mopub through API request (Authentication bypass) '

22 Aug 2016

b'GitLab' disclosed a bug submitted by b'plazmaz' 
b'XSS On meta tags in profile page'

21 Aug 2016

b'Gratipay' disclosed a bug submitted by b'a5tronaut' 
b'fix bug in username restriction'

20 Aug 2016

b'Uber' disclosed a bug submitted by b'raghav_bisht' 
b'XSS At "pages.et.uber.com"'

19 Aug 2016

b'HackerOne' disclosed a bug submitted by b'heracles' 
b'Non-secure requests are not automatically upgraded to HTTPS'

19 Aug 2016

b'concrete5' disclosed a bug submitted by b'paulos_' 
b'Local File Inclusion path bypass'

19 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'Multiple XSS in Camptix Event Ticketing Plugin'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'CSV Injection at Camptix Event Ticketing'

18 Aug 2016

b'HackerOne' disclosed a bug submitted by b'faisalahmed' 
b'Information leakage of private program'

18 Aug 2016

b'GoCD' disclosed a bug submitted by b'mr__robot' 
b'X-Content-Type-Options header missing at Auth Login'

18 Aug 2016

b'Coursera' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'Broken authentication and session management flaw '

18 Aug 2016

b'ExpressionEngine' disclosed a bug submitted by b'strukt' 
b'Arbitrary SQL query execution and reflected XSS in the "SQL Query Form"'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'dia2diab' 
b'XSS in Tagregator plugin'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'jamalcom' 
b'Path Disclosure Vulnerability'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'proxynwh' 
b'SSL certificate public key less than 2048 bit'

18 Aug 2016

1 ... 608 609 610 611 612 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM