Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'clubjk' 
b'XSS Reflected incategories*p'

03 Oct 2016

b'HackerOne' disclosed a bug submitted by b'rbcafe' 
b'Obtain the username & the uid of the one doing the S3 sync on Hackerone'

03 Oct 2016

b'Pornhub' disclosed a bug submitted by b'jouko' 
b'SSRF & XSS (W3 Total Cache)'

03 Oct 2016

b'Romit' disclosed a bug submitted by b'gone' 
b'[CRITICAL]-Taking over entire subdomain of romit.io'

03 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[rabota.mail.ru] Open Redirect'

03 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[my.mail.ru] CRLF Injection'

03 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[s.mail.ru] CRLF Injection'

03 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[upload-X.my.mail.ru] /uploadphoto Insecure Direct Object References'

03 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[my.mail.ru] HTML injection ? ??????? ?? myadmin@corp.mail.ru'

03 Oct 2016

b'Slack' disclosed a bug submitted by b'sudotop' 
b'Open Redirect on slack.com'

02 Oct 2016

b'Algolia' disclosed a bug submitted by b'michiel' 
b'RCE on facebooksearch.algolia.com'

01 Oct 2016

b'Twitter' disclosed a bug submitted by b'ru_raz0r' 
b'reverb.twitter.com redirects to vulnerable reverb.guru'

01 Oct 2016

b'Skyliner' disclosed a bug submitted by b'fabiothebest89' 
b'DNSSEC misconfiguration'

30 Sep 2016

b'WebSummit' disclosed a bug submitted by b'j0_1_0_1_0_0_0_0' 
b'WebSummit - Open Redirect '

30 Sep 2016

b'Zomato' disclosed a bug submitted by b'hussain_0x3c' 
b'Twitter Disconnect CSRF'

30 Sep 2016

b'Instacart' disclosed a bug submitted by b'hussain_0x3c' 
b'Cross-Site Scripting Reflected On Main Domain'

30 Sep 2016

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'Unauthorized read access to Invoices by PM (Access control Issues)'

29 Sep 2016

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'PM can delete payment of any invoice in company (Access control Issue)'

29 Sep 2016

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'Unauthorized access to all the actions of invoices by PM (Access control Issues) '

29 Sep 2016

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'PM can delete the company logo image (Vertical Privilege Escalation )'

29 Sep 2016

1 ... 608 609 610 611 612 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM