Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ownCloud' disclosed a bug submitted by b'ishahriyar' 
b'Full Path Disclosure '

06 Jan 2016

b'Gratipay' disclosed a bug submitted by b'hussein98d' 
b'Mail spaming'

06 Jan 2016

b'Whisper' disclosed a bug submitted by b'1n3' 
b'Host Header Injection/Redirection'

06 Jan 2016

b'Coinbase' disclosed a bug submitted by b'ddworken' 
b'Potential for Double Spend via Sign Message Utility'

06 Jan 2016

b'ownCloud' disclosed a bug submitted by b'testalways' 
b'Apache documentation'

04 Jan 2016

b'Urban Dictionary' disclosed a bug submitted by b'harry_mg' 
b'URGENT - Subdomain Takeover in support.urbandictionary.com pointing to Zendesk'

04 Jan 2016

b'ownCloud' disclosed a bug submitted by b'herlove' 
b'apps.owncloud.com: Referer protection Bypassed'

02 Jan 2016

b'ownCloud' disclosed a bug submitted by b'molejarka' 
b'[https://test1.owncloud.com/owncloud6/] Guessable password used for admin user'

02 Jan 2016

b'ownCloud' disclosed a bug submitted by b'1n3' 
b'Apache Range Header Denial of Service Attack (Confirmed PoC)'

01 Jan 2016

b'ownCloud' disclosed a bug submitted by b'testalways' 
b'directory listing in https://demo.owncloud.org/doc/'

01 Jan 2016

b'Zendesk' disclosed a bug submitted by b'a0xnirudh' 
b'Stored XSS in comments'

01 Jan 2016

b'HackerOne' disclosed a bug submitted by b'avlidienbrunn' 
b'CSRF possible when SOP Bypass/UXSS is available '

30 Dec 2015

b'Khan Academy' disclosed a bug submitted by b'benburrill' 
b'Escaping the iframe via exceptions'

29 Dec 2015

b'HackerOne' disclosed a bug submitted by b'h1-' 
b"Team Member(s) associated with a Custom Group Created with 'Program Managment' only permissions can Comments on Bug Reports "

29 Dec 2015

b'Snapchat' disclosed a bug submitted by b'reecer' 
b'Password Reset - query param overrides postdata'

24 Dec 2015

b'Coinbase' disclosed a bug submitted by b'paulos_' 
b'User email enumuration using Gmail'

23 Dec 2015

b'Imgur' disclosed a bug submitted by b'dipak_das' 
b'"Sign me out everywhere" does not work for desktop sessions'

23 Dec 2015

b'Shopify' disclosed a bug submitted by b'juhhga' 
b'Reflected XSS in cart at hardware.shopify.com'

22 Dec 2015

b'Twitter' disclosed a bug submitted by b'hussein98d' 
b'URGENT : NICHE.co Account Take Over Vulnerability'

21 Dec 2015

b'Coinbase' disclosed a bug submitted by b'sick-sec' 
b'HTML injection in apps user review '

21 Dec 2015

1 ... 619 620 621 622 623 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM