Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'heracles' 
b'Non-secure requests are not automatically upgraded to HTTPS'

19 Aug 2016

b'concrete5' disclosed a bug submitted by b'paulos_' 
b'Local File Inclusion path bypass'

19 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'Multiple XSS in Camptix Event Ticketing Plugin'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'CSV Injection at Camptix Event Ticketing'

18 Aug 2016

b'HackerOne' disclosed a bug submitted by b'faisalahmed' 
b'Information leakage of private program'

18 Aug 2016

b'GoCD' disclosed a bug submitted by b'mr__robot' 
b'X-Content-Type-Options header missing at Auth Login'

18 Aug 2016

b'Coursera' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'Broken authentication and session management flaw '

18 Aug 2016

b'ExpressionEngine' disclosed a bug submitted by b'strukt' 
b'Arbitrary SQL query execution and reflected XSS in the "SQL Query Form"'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'dia2diab' 
b'XSS in Tagregator plugin'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'jamalcom' 
b'Path Disclosure Vulnerability'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'proxynwh' 
b'SSL certificate public key less than 2048 bit'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'proxynwh' 
b'Brute force on wp-login'

18 Aug 2016

b'HackerOne' disclosed a bug submitted by b'troubleshooter' 
b'Requesting Mediation possible on reports that are too old for mediation'

17 Aug 2016

b'Slack' disclosed a bug submitted by b'nhavis' 
b'CSRF - Add optional two factor mobile number'

17 Aug 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'HTTP Track/Trace Method Enabled'

17 Aug 2016

b'OLX' disclosed a bug submitted by b'palashjhabak' 
b'Unauthorised access to olx.in user accounts. '

17 Aug 2016

b'HackerOne' disclosed a bug submitted by b'saeedhashem' 
b"Ability to monitor reports' submission in real time"

17 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'fransrosen' 
b'Response Header injection using redirect_uri together with PHP that utilizes Header Folding according to RFC1945 and Internet Explorer 11'

17 Aug 2016

b'OLX' disclosed a bug submitted by b'niemand' 
b'SQLi in Payment Request'

16 Aug 2016

b'Pornhub' disclosed a bug submitted by b'agarri_fr' 
b'libav (used during conversion of uploaded videos) is vulnerable to SSRF attacks'

15 Aug 2016

1 ... 620 621 622 623 624 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM