Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OLX' disclosed a bug submitted by b'url' 
b'Name, email, phone and more disclosure on user ID (API)'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'shield' 
b'Reflected Cross Site scripting Attack (XSS)'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'dsopas' 
b'Stored XSS on contact name'

20 Oct 2016

b'Brave Software' disclosed a bug submitted by b'tushu' 
b'DOS in browser using window.print() function'

20 Oct 2016

b'Slack' disclosed a bug submitted by b'secalert' 
b'Authentication bypass leads to sensitive data exposure (token+secret)'

19 Oct 2016

b'Shopify' disclosed a bug submitted by b'satishb3' 
b'password less login token expiration issue'

19 Oct 2016

b'LocalTapiola' disclosed a bug submitted by b'g0blin' 
b'SQL Injection on `/cs/Satellite` path'

19 Oct 2016

b'Brave Software' disclosed a bug submitted by b'kicker' 
b'Javascript confirm() crashes Brave on PC'

19 Oct 2016

b'Adobe' disclosed a bug submitted by b'dsopas' 
b'Adobe XSS'

18 Oct 2016

b'Envoy' disclosed a bug submitted by b'bobrov' 
b'[dashboard.signwithenvoy.com] Open Redirect'

18 Oct 2016

b'HackerOne' disclosed a bug submitted by b'malcolmx' 
b'Possible CSRF during external programs'

18 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'ahsantahir' 
b'Reflected XSS @ games.mail.ru'

18 Oct 2016

b'Instacart' disclosed a bug submitted by b'dsopas' 
b'Reflected File Download on recipe list search'

18 Oct 2016

b'WP API' disclosed a bug submitted by b'albinowax' 
b'Missing access control exposing detailed information on all users'

17 Oct 2016

b'VK.com' disclosed a bug submitted by b'grande' 
b'?????? ?????? ??? ???????? ? ??? ????????? ????????'

17 Oct 2016

b'Brave Software' disclosed a bug submitted by b'smelt' 
b'JavaScript URL Issues in the latest version of Brave Browser'

17 Oct 2016

b'Twitter' disclosed a bug submitted by b'a0005' 
b'List of a ton of internal twitter servers available on GitHub'

17 Oct 2016

b'Brave Software' disclosed a bug submitted by b'armaanpathan1' 
b'[iOS] URI Obfuscation in iOS application'

17 Oct 2016

b'RubyGems' disclosed a bug submitted by b'eterm' 
b'Login credentials transmitted in cleartext on index.rubygems.org'

17 Oct 2016

b'RubyGems' disclosed a bug submitted by b'kicker' 
b'Invalid username updating'

17 Oct 2016

1 ... 618 619 620 621 622 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM