Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'jobert' 
b"Attacker can extract list of private project's project members"

01 Aug 2016

b'Phabricator' disclosed a bug submitted by b'danny_b' 
b'HTML in Diffusion not escaped in certain circumstances'

01 Aug 2016

b'ok.ru' disclosed a bug submitted by b'vijay_kumar1110' 
b'Critical : Access to group videos where videos are restricted for all users(Broken authentication )'

01 Aug 2016

b'drchrono' disclosed a bug submitted by b'mugeesahmed' 
b'Information Disclosure'

31 Jul 2016

b'drchrono' disclosed a bug submitted by b'ghumman' 
b'Security Issue : CSRF Token Design Flaw'

30 Jul 2016

b'Vimeo' disclosed a bug submitted by b'opnsec' 
b'All Vimeo Private videos disclosure via Authorization Bypass'

29 Jul 2016

b'Vimeo' disclosed a bug submitted by b'opnsec' 
b'CSRF on Vimeo via cross site flashing leading to info disclosure and private videos go public'

29 Jul 2016

b'Shopify' disclosed a bug submitted by b'capripio' 
b'Owner/Staff force to redirect to malware Shopify page'

28 Jul 2016

b'Shopify' disclosed a bug submitted by b'nismo' 
b'XSS in Draft Orders in Timeline i SHOPIFY Admin Site!'

28 Jul 2016

b'PHP' disclosed a bug submitted by b'evonide' 
b"ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize"

28 Jul 2016

b'PHP' disclosed a bug submitted by b'evonide' 
b"Use After Free Vulnerability in PHP's GC algorithm and unserialize"

28 Jul 2016

b'PHP' disclosed a bug submitted by b'rc0r' 
b'Buffer overflow in HTTP url parsing functions'

28 Jul 2016

b'Imgur' disclosed a bug submitted by b'fransrosen' 
b'Reflected Flash XSS using swfupload.swf with an epileptic reloading to bypass the button-event'

28 Jul 2016

b'Moneybird' disclosed a bug submitted by b'a5tronaut' 
b'Open Redirect vulnerability in moneybird.com'

28 Jul 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Persistent XSS on public wiki pages'

27 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'shoveller' 
b'help.nextcloud.com: Known DoS condition (null pointer deref) in Nginx running'

27 Jul 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Privilege escalation to access all private groups and repositories'

27 Jul 2016

b'Uber' disclosed a bug submitted by b'jouko' 
b'Stored XSS on newsroom.uber.com admin panel / Stream WordPress plugin'

27 Jul 2016

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'[CSRF] Install premium themes '

27 Jul 2016

b'Pornhub' disclosed a bug submitted by b'static' 
b'[phpobject in cookie] Remote shell/command execution'

27 Jul 2016

1 ... 620 621 622 623 624 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM