Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Python' disclosed a bug submitted by b'hxd' 
b'CVE-2016-0772 - python: smtplib StartTLS stripping attack'

30 Aug 2016

b'Phabricator' disclosed a bug submitted by b'pradeepsmehta' 
b'link reset problem'

30 Aug 2016

b'ownCloud' disclosed a bug submitted by b'bobrov' 
b'[forum.owncloud.org] IE, Edge XSS via Request-URI'

30 Aug 2016

b'General Motors' disclosed a bug submitted by b'koolacac' 
b'XSS in GM '

30 Aug 2016

b'General Motors' disclosed a bug submitted by b'meals' 
b'gmmovinparts.com SQLi via forgot_password.jsp'

30 Aug 2016

b'General Motors' disclosed a bug submitted by b'dipak_das' 
b'refelected Xss on https://gmid.gm.com/gmid/jsp/GMIDInitialLogin.jsp'

30 Aug 2016

b'General Motors' disclosed a bug submitted by b'adrianomarcmont' 
b'Content Spoof in webcaps.ecomm.gm.com'

30 Aug 2016

b'General Motors' disclosed a bug submitted by b'adrianomarcmont' 
b'Reflected Cross Site Script in m.chevrolet.com.wpsegment5.gm.com'

30 Aug 2016

b'Dropbox' disclosed a bug submitted by b'agarri_fr' 
b'SSRF allows access to internal services like Ganglia'

30 Aug 2016

b'Dropbox' disclosed a bug submitted by b'coder13' 
b'XSS, Unvalidated redirects & phishing website hosting on dropbox servers'

30 Aug 2016

b'Dropbox' disclosed a bug submitted by b'maxon' 
b'Can make any number of dropbox accounts with one email'

30 Aug 2016

b'Gratipay' disclosed a bug submitted by b'i1ackerone' 
b'Reset Link Issue'

30 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'muhaddimu' 
b'Click Jacking'

29 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'UI Redressing ( ClickJacking ) Issue on Information submit form '

29 Aug 2016

b'ok.ru' disclosed a bug submitted by b'mthirup' 
b'http://217.20.144.201 privilege escalation in apache tomcat SessionEample-script'

29 Aug 2016

b'Certly' disclosed a bug submitted by b'cjlegacion' 
b'Business logic Failure - Browser cache management and logout vulnerability in Certly'

29 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'punkit' 
b'Clickjacking: X-Frame-Options header missing'

29 Aug 2016

b'Twitter' disclosed a bug submitted by b'secgeek' 
b'Html Injection and Possible XSS in sms-be-vip.twitter.com'

28 Aug 2016

b'New Relic' disclosed a bug submitted by b'cisplatin' 
b'User enumeration possible from log-in timing difference'

27 Aug 2016

b'New Relic' disclosed a bug submitted by b'cisplatin' 
b'CSV Injection in sub_accounts.csv'

27 Aug 2016

1 ... 617 618 619 620 621 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM