REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'shopify-scripts'
disclosed a bug submitted by
b'geeknik'
b'attempting double-free using the mruby compiler `mrbc`'
07 Feb 2017
b'shopify-scripts'
disclosed a bug submitted by
b'titanous'
b'Heap use-after-free during range creation'
07 Feb 2017
b'shopify-scripts'
disclosed a bug submitted by
b'titanous'
b'Heap overflow due to off-by-one when expanding stack'
07 Feb 2017
b'Yelp'
disclosed a bug submitted by
b'tk0'
b'X.509 certificate validation fails on international vanity domains'
06 Feb 2017
b'shopify-scripts'
disclosed a bug submitted by
b'marotagem_vrt'
b'mrb_str_modify try to write to memory not marked for writing'
06 Feb 2017
b'Twitter'
disclosed a bug submitted by
b'mishre'
b'Clickjacking Periscope.tv on Chrome'
06 Feb 2017
b'Pornhub'
disclosed a bug submitted by
b'mr_47'
b'Wordpress Content injection '
06 Feb 2017
b'Pornhub'
disclosed a bug submitted by
b'mr_47'
b'Debug.log file Exposed to Public \\Full Path Disclosure\\'
06 Feb 2017
b'Badoo'
disclosed a bug submitted by
b'tikoo_sahil'
b'CSRF Attack on (m.badoo.com)deleting account and erasing imported contacts'
06 Feb 2017
b'Phabricator'
disclosed a bug submitted by
b'denispugachev'
b'Restricted file access when it exists in old versions of task or wiki document'
06 Feb 2017
b'Phabricator'
disclosed a bug submitted by
b'denispugachev'
b'Enumerating emails through "Forgot Password" form'
06 Feb 2017
b'Ubiquiti Networks'
disclosed a bug submitted by
b'dem0n1212'
b'Subdomain Takeover (moderator.ubnt.com)'
06 Feb 2017
b'Yelp'
disclosed a bug submitted by
b'jazzy17'
b'Able to download arbitrary PHP files at yelpblog.com'
06 Feb 2017
b'Twitter'
disclosed a bug submitted by
b'hussein98d'
b'GNIP subdomain take over'
06 Feb 2017
b'shopify-scripts'
disclosed a bug submitted by
b'icanthack'
b'SIGABRT - mrb_default_allocf '
05 Feb 2017
b'shopify-scripts'
disclosed a bug submitted by
b'icanthack'
b'Segmentation fault on program counter'
05 Feb 2017
b'LocalTapiola'
disclosed a bug submitted by
b'zenhax'
b'HTTP status code manipluation & java stack trace '
04 Feb 2017
b'LocalTapiola'
disclosed a bug submitted by
b'frankie_xote'
b'Enumeration in unsubscribe -function of /omatalousuk (viestinta.lahitapiola.fi)'
04 Feb 2017
b'LocalTapiola'
disclosed a bug submitted by
b'kelia'
b'Open Redirect bypass and cookie leakage on www.lahitapiola.com'
04 Feb 2017
b'Legal Robot'
disclosed a bug submitted by
b'japzdivino'
b'Password complexity requirements not enforced'
04 Feb 2017
1
...
618
619
620
621
622
...
773
BY DENIS WERNER - @NOBBD -
IMPRESSUM