Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'enmach' 
b'Brute Force Amplification Attack'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'ak1t4' 
b'Content injection on 404 error page at faspex.uber.com'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'orange' 
b'CBC "cut and paste" attack may cause Open Redirect(even XSS)'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Enumeration of Invite Codes Allows for Estimating Number of Uber Riders'

12 Aug 2016

b'Twitter' disclosed a bug submitted by b'mazen160' 
b'XSS in the "Poll" Feature on Twitter.com'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'albinowax' 
b'Stored XSS on developer.uber.com via admin account compromise'

12 Aug 2016

b'Mail.Ru' disclosed a bug submitted by b'paresh_parmar' 
b'XSS at af.attachmail.ru'

12 Aug 2016

b'OLX' disclosed a bug submitted by b'konqi' 
b'Arbitrary File Reading'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'nikhil_patil' 
b'Avoiding Surge Pricing'

11 Aug 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'enmach' 
b'Reflected XSS in scores.ubnt.com'

11 Aug 2016

b'Keybase' disclosed a bug submitted by b'franjkovic' 
b'Race conditions can be used to bypass invitation limit'

10 Aug 2016

b'Trello' disclosed a bug submitted by b'mefkan' 
b'Sending Unlimited Mails To Anybody With Easy Social Share Buttons Plugin'

10 Aug 2016

b'Trello' disclosed a bug submitted by b'mefkan' 
b'XSS and Open-Redirect via SVG '

10 Aug 2016

b'Trello' disclosed a bug submitted by b'rajauzairabdullah' 
b'Verification Code Reused For activating 2FA'

10 Aug 2016

b'Maximum' disclosed a bug submitted by b'linkks' 
b'Blind SQL Injection'

10 Aug 2016

b'Coinbase' disclosed a bug submitted by b'rajauzairabdullah' 
b'Create Multiple Account Using Similar X-CSRF token'

09 Aug 2016

b'HackerOne' disclosed a bug submitted by b'xsserboiii' 
b'Reward Money Leakage'

09 Aug 2016

b'SecNews' disclosed a bug submitted by b'malcolmx' 
b'Content spoofing due to the improper behavior of the not-found message '

09 Aug 2016

b'SecNews' disclosed a bug submitted by b'sameoldstory' 
b'Querying private posts and changing post meta'

09 Aug 2016

b'Shopify' disclosed a bug submitted by b'vijay_kumar1110' 
b'Delete/modify your own comment after limited access(IDOR)'

09 Aug 2016

1 ... 622 623 624 625 626 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM