Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'lalka' 
b'Time-based sql-injection ?? https://puzzle.mail.ru'

15 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'abc12345' 
b'Unsecured Grafana instance'

15 Nov 2016

b'Twitter' disclosed a bug submitted by b'kedr' 
b'View liked twits of private account via publish.twitter.com'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'faisalahmed' 
b'Stored XSS in Filters'

14 Nov 2016

b'New Relic' disclosed a bug submitted by b'hackerwahab' 
b'Stored Xss in rpm.newrelic.com'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Nginx server version disclosure'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'htaccess file is accesible'

14 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Spoof Email with Hyperlink Injection via Invites functionality'

14 Nov 2016

b'Brave Software' disclosed a bug submitted by b'bibo' 
b'2 Directory Listing on ledger.brave.com & vault-staging.brave.com'

13 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ak1t4' 
b'Email Server Compromised at secure.lahitapiola.fi'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Missing rel=noopener noreferrer in target=_blank links (Phishing attack)'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Incorrect detection of onion URLs'

13 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Not using Binary::safe* functions for substr/strlen function'

13 Nov 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] post to anyone even if their stream is restricted to friends only'

11 Nov 2016

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'race condition in adding team members'

10 Nov 2016

b'Badoo' disclosed a bug submitted by b'c0rte' 
b'No rate-limit in SERVER_SECURITY_CHECK'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'ng1' 
b'Content Spoofing or Text Injection (404 error page injection)'

10 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'tsug0d' 
b'Reflected XSS in LTContactFormReceiver (/cs/Satellite)'

10 Nov 2016

b'Eobot' disclosed a bug submitted by b'mr_sharma_' 
b'No password length restriction'

10 Nov 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'e3amn2l' 
b'Using plain git protocol (vulnerable to MITM)'

09 Nov 2016

1 ... 618 619 620 621 622 ... 756

BY DENIS WERNER - @NOBBD - IMPRESSUM