Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical - Insecure Direct Object Reference - Deleting any member of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Delete any group of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Delete any venue of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Delete any rule of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Delete any terminal/gatekeeper of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Stored XSS '

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get Authentication Details of any Terminal/Gatekeeper'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b"Critical IDOR - Set anyone's Terminal Data remotely"

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b"Critical IDOR - Get anyone's Terminal Data remotely"

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Password reset link is not Expiring'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Multiple Stored XSS'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Missing Server Side Validation of CSRF Middleware Token in Change Password Request'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Multiple Stored XSS on Sanbox.veris.in through Veris Frontdesk Android App'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Can select any Parent while creating new Venue'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get Rules of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Make Rule for Any Group & Any Venue remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get venue data of any organization remotely'

12 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t1v' 
b'Enumerating userIDs with phone numbers'

11 Jun 2016

b'Moneybird' disclosed a bug submitted by b'krankopwnz' 
b'Reflected XSS in Backend search'

11 Jun 2016

b'Sucuri' disclosed a bug submitted by b'jackds' 
b'CRLF/HTTP header injection www.sucuri.net'

10 Jun 2016

1 ... 617 618 619 620 621 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM