Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'[IDOR] Deleting other users comment'

24 Nov 2016

b'Ian Dunn' disclosed a bug submitted by b'ravenbugbounty' 
b'No CAPTCHA ia exist in pages'

23 Nov 2016

b'ownCloud' disclosed a bug submitted by b'fbogner' 
b'Arbitrary Code Injection in ownCloud\xe2\x80\x99s Windows Client'

23 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Read Application Name , Subscribers Count '

23 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b' Stored XSS(Cross Site Scripting) In Slack App Name'

22 Nov 2016

b'Imgur' disclosed a bug submitted by b'nathonsecurity' 
b'Unauthenticated Docker registry'

22 Nov 2016

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Email Attachment'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Bypass the resend limit in Send Invites'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'dem0n' 
b' Spam Some one using (user.saveInvite) system'

22 Nov 2016

b'bitaccess' disclosed a bug submitted by b'raghu42' 
b'Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error. '

21 Nov 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open redirect and XSS in supporthiring.shopify.com'

21 Nov 2016

b'HackerOne' disclosed a bug submitted by b'sasi2103' 
b'Researcher gets email updates on a private program after he/she quits that program.'

21 Nov 2016

b'Slack' disclosed a bug submitted by b'linkks' 
b'RC4 cipher suites detected on status.slack.com'

18 Nov 2016

b'Instacart' disclosed a bug submitted by b'sameoldstory' 
b'Full access to any list'

18 Nov 2016

b'VK.com' disclosed a bug submitted by b'linkks' 
b'????'

18 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Nginx version disclosure via response header'

18 Nov 2016

b'Slack' disclosed a bug submitted by b'asanso' 
b'CSRF in github integration'

18 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'rpinuaga' 
b'Reflected XSS in www.lahitapiola.fi (/cs/Satellite) using Oracle WebCenter -page'

17 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'rpinuaga' 
b'Oracle WebCenter Sites Support Tools available and Information disclosure (/cs/Satellite)'

17 Nov 2016

b'OWOX, Inc.' disclosed a bug submitted by b'gaurang' 
b'Subdomain Takeover on http://kiosk.owox.com/'

17 Nov 2016

1 ... 621 622 623 624 625 ... 760

BY DENIS WERNER - @NOBBD - IMPRESSUM