Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'PM with can Set up email for invoices and estimates (Access control Issue)'

29 Sep 2016

b'Harvest' disclosed a bug submitted by b'vijay_kumar1110' 
b'Record payment for any invoice by PM (Access control Issue)'

29 Sep 2016

b'LocalTapiola' disclosed a bug submitted by b'derision' 
b'CRLF injection in https://verkkopalvelu.lahitapiola.fi/'

29 Sep 2016

b'Uber' disclosed a bug submitted by b'geekboy' 
b'Stealing users password (Limited Scenario)'

29 Sep 2016

b'Nextcloud' disclosed a bug submitted by b'saleh_s' 
b'demo.nextcloud.com: Content spoofing due to default Apache Error Page'

29 Sep 2016

b'Skyliner' disclosed a bug submitted by b'bobrov' 
b'[skyliner.io / qa.skyliner.io] Open Redirect'

29 Sep 2016

b'Mail.Ru' disclosed a bug submitted by b'c37hun' 
b'Full Path Disclosure'

29 Sep 2016

b'Slack' disclosed a bug submitted by b'thisishrsh' 
b'Creating Post on a restricted channel'

29 Sep 2016

b'VK.com' disclosed a bug submitted by b'ciph3r7r0ll' 
b'Issue in the implementation of captcha and race condition'

29 Sep 2016

b'itBit Exchange' disclosed a bug submitted by b'smitgajra007' 
b'Open Redirect in https://exchange.itbit.com'

28 Sep 2016

b'Legal Robot' disclosed a bug submitted by b'shani_1' 
b"AWS S3 website can't serve security headers, may allow clickjacking"

28 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'tbmnull' 
b'stored SELF xss on Basic Google Maps Placemarks Settings plugin'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'ethnicalhacker' 
b'Potentially vulnerable version of Apache software in and default files on https://iandunn.name/'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'superngorks' 
b'bypass to csv injection'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'jshindl' 
b'Send emails to all users using Camptix'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'jigarthakkar39' 
b'Physical Access to Mobile App Allows Local Attribute Updates without Authentication'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'bobrov' 
b'Open Redirect in m.uber.com'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'tgpanackal' 
b'Unvalidated/Open Redirect allowing attackers to implement phishing attack'

27 Sep 2016

b'Shopify' disclosed a bug submitted by b'ishwar_prasad_bhat' 
b'Payment gateway status transferred to Shopify without authentication'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'cablej' 
b'SSRF in account webhook (through API)'

27 Sep 2016

1 ... 609 610 611 612 613 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM