Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Imgur' disclosed a bug submitted by b'strukt' 
b'Stored XSS in albums on http://m.imgur.com/'

17 Jan 2017

b'Algolia' disclosed a bug submitted by b'malcolmx' 
b'2-factor authentication bypass'

17 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'HTTP-Basic Authentication on logs.nextcloud.com'

17 Jan 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'm7mdharoun' 
b'xss in Theme http://bztfashion.booztx.com'

16 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dremos' 
b'Avatar image upload and bypass real image verification '

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'kelia' 
b'ruby DoS https://www.mruby.science'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Type confusion in wrap_decimal leading to memory corruption'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Null pointer dereference due to TOCTTOU bug in mrb_time_initialize'

15 Jan 2017

b'Twitter' disclosed a bug submitted by b'mishre' 
b"Twitter for android is exposing user's location to any installed android app"

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Disclosure of administrators via JSON on nextcloud.com Wordpress'

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dem0n' 
b'WordPress <= 4.6.1 Stored XSS Via Theme File'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'id-is-vulnerable' 
b'Create New User Whilst Logged On'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'meals' 
b'Parameter Manipulation allowed for viewing of other user\xe2\x80\x99s teavana.com orders'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'e3xpl0it' 
b'Dom Based Xss DIV.innerHTML parameters store.starbucks*'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'Bad content-type in response header when getting document can lead to html injection'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'URI scheme bypass in mail app lead to HTML content spoof and opener control'

12 Jan 2017

b'OLX' disclosed a bug submitted by b'mohamedsherif' 
b'Directory Listing of all the resource files of olx.com.eg '

12 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'vishnu1' 
b'Near-duplicate accounts allowed with ignored email mutations'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'meals' 
b'Remote code execution on an Army website'

12 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS on a Department of Defense website'

12 Jan 2017

1 ... 618 619 620 621 622 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM