Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'drchrono' disclosed a bug submitted by b'saleh_s' 
b'[CRITICAL] CSRF leading to account take over '

14 Jun 2016

b'Uber' disclosed a bug submitted by b'shmoo' 
b'Authentication bypass on partners iOS app'

14 Jun 2016

b'Uber' disclosed a bug submitted by b'glc' 
b'SQL injection in Wordpress Plugin Huge IT Video Gallery at https://drive.uber.com/frmarketplace/'

14 Jun 2016

b'Uber' disclosed a bug submitted by b'shmoo' 
b'Possible to View Driver Waybill via Driver UUID'

14 Jun 2016

b'Uber' disclosed a bug submitted by b'siddiki' 
b'Multiple Vulnerabilities (Including SQLi) in love.uber.com'

14 Jun 2016

b'Dovecot' disclosed a bug submitted by b'ignatius' 
b'Apache version disclosure'

14 Jun 2016

b'Uber' disclosed a bug submitted by b'ashish_goanhacker' 
b'Unsubscribe any user from receiving email'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'jreynolds' 
b'developer.uber.com/404 and developer.uber.com/docs/404 are susceptible to iframes'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'sw3nlab' 
b'Disclosure of ways to the site root'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'kusl' 
b'Information disclosure at lite.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'decoder' 
b'Easy spam with USE My PHONE Feature'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'durga' 
b'Session Impersonation in riders.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'iad' 
b'Disclosure of ip addresses in local network of uber'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'SMS Flood with Update Profile '

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Changing Driver Passwords With Only an Authenticated Session (no password, no email)'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Uploading Plain Text to uber-documents.s3.amazonaws.com Through the Driver Document Upload Page'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'Uber password reset link EMAIL FLOOD'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'mini' 
b'Privilege escalation to allow non activated users to login and use uber partner ios app'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t' 
b'Possibility to brute force invite codes in riders.uber.com'

13 Jun 2016

1 ... 615 616 617 618 619 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM