Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'zeroknife' 
b'REG: Content provider information leakage'

24 Jun 2016

b'HackerOne' disclosed a bug submitted by b'arneswinnen' 
b'Web Authentication Endpoint Credentials Brute-Force Vulnerability'

23 Jun 2016

b'Bime' disclosed a bug submitted by b'michiel' 
b'Subdomain takeover due to unclaimed Amazon S3 bucket on a2.bime.io'

22 Jun 2016

b'ThisData' disclosed a bug submitted by b'7h0r4pp4n' 
b'Host Header Poisoning in thisdata.com'

22 Jun 2016

b'bitaccess' disclosed a bug submitted by b'geekboy' 
b'BYASSING OTP Verification'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'awake' 
b'CSV Macro injection in Video Manager (CEMI)'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'Public Facing Barracuda Login'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'mak' 
b'Multiple endpoints are vulnerable to XML External Entity injection (XXE) '

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'PornIQ Reflected Cross-Site Scripting'

22 Jun 2016

b'Mail.Ru' disclosed a bug submitted by b'samidrif' 
b'Code source discloure & ability to get database information "SQL injection" in [townwars.mail.ru]'

22 Jun 2016

b'Romit' disclosed a bug submitted by b'eboda' 
b'Session Fixation'

22 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'japongskie' 
b'No Rate Limiting on stats.nextcloud.com login'

22 Jun 2016

b'Zomato' disclosed a bug submitted by b'dejavuln' 
b'Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)'

22 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'vivek_patil' 
b'WordPress Vulnerabilities: User Enumeration, Vulnerable Akismet Plugin, XML-RPC Interface available'

22 Jun 2016

b'Slack' disclosed a bug submitted by b'mkbb' 
b'Unauthenticated Access to some old file thumbnails '

21 Jun 2016

b'HackerOne' disclosed a bug submitted by b'jthetechguy' 
b'All information is not removed from published reports'

21 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'armfox97' 
b'Deny access to download.nextcloud.com + folders'

21 Jun 2016

b'Shopify' disclosed a bug submitted by b'ksaurabh' 
b'Fetching external resources through svg images'

21 Jun 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'Heap corruption in string.c tr_trans() due to undersized buffer'

21 Jun 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'Heap corruption in DateTime.strftime() on 32 bit for certain format strings'

21 Jun 2016

1 ... 611 612 613 614 615 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM