Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Algolia' disclosed a bug submitted by b'xenon' 
b'[github.algolia.com] XSS'

01 Sep 2016

b'Automattic' disclosed a bug submitted by b'psych0tr1a' 
b'[bbPress] Stored XSS in any forum post.'

01 Sep 2016

b'HackerOne' disclosed a bug submitted by b'kirils' 
b'Disclosure of external users invited to a specific report'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'apara' 
b'View all deleted comments and rating of any app .'

01 Sep 2016

b'Slack' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs'

01 Sep 2016

b'ownCloud' disclosed a bug submitted by b'himanshu_mehta' 
b'ownCloud 2.2.2.6192 DLL Hijacking Vulnerability'

31 Aug 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'Open Redirect possible in https://www.shopify.com/admin/'

31 Aug 2016

b'LocalTapiola' disclosed a bug submitted by b'rojanr' 
b'DOM XSS bypassing in Regional Office -selector'

31 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'sivakumar88' 
b'Reflected Self-XSS Vulnerability in the Comment section of Files (Different-payloads)'

31 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'punkit' 
b' Legal | Application is Missing CSP(Content Security Policy) Header '

31 Aug 2016

b'drchrono' disclosed a bug submitted by b'7seciq' 
b'Request Accepts without X-CSRFToken [ Header - Cookie ]'

31 Aug 2016

b'drchrono' disclosed a bug submitted by b'7seciq' 
b'CSRF Add Album On onpatient.com '

31 Aug 2016

b'Square Open Source' disclosed a bug submitted by b'nvolcz' 
b'Cache poisoning for okhttp '

31 Aug 2016

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'Cookie-based client-side denial-of-service to all of the L\xc3\xa4hitapiola domains'

30 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b'Content spoofing in cloud.nextcloud.com'

30 Aug 2016

b'PHP' disclosed a bug submitted by b'hoangnguyen' 
b'NULL Pointer Dereference in exif_process_user_comment'

30 Aug 2016

b'PHP' disclosed a bug submitted by b'hoangnguyen' 
b'Out of bound read in exif_process_IFD_in_MAKERNOTE'

30 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'secsac' 
b'demo.nextcloud.com: Content spoofing due to default Apache Error Page'

30 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'naveenv' 
b'Reflected Self-XSS Vulnerability in the Comment section of Files Information'

30 Aug 2016

b'Python' disclosed a bug submitted by b'hxd' 
b'CVE-2016-0772 - python: smtplib StartTLS stripping attack'

30 Aug 2016

1 ... 616 617 618 619 620 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM