Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Xero' disclosed a bug submitted by b'psychomantis' 
b'Additonal stored XSS in Add note/Expected payment Date'

16 Jul 2016

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'Report title and issue information prepopulated '

15 Jul 2016

b'Uber' disclosed a bug submitted by b'jouko' 
b'OneLogin authentication bypass on WordPress sites via XMLRPC'

15 Jul 2016

b'Keybase' disclosed a bug submitted by b'sarwarjahan' 
b'Un-handled exception leads to Information Disclosure'

15 Jul 2016

b'Gratipay' disclosed a bug submitted by b'secbughunter' 
b'stop serving grtp.co over HTTP'

15 Jul 2016

b'Uber' disclosed a bug submitted by b'mongo' 
b"Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)"

14 Jul 2016

b'Snapchat' disclosed a bug submitted by b'notnaffy' 
b'Administrator access to a Django Administration Panel on *.sc-corp.net via bruteforced credentials'

14 Jul 2016

b'Trello' disclosed a bug submitted by b'theflofly' 
b'If a team is public, the web socket receives data about the Team visible boards'

14 Jul 2016

b'Trello' disclosed a bug submitted by b'theflofly' 
b'Using WebSocket I can always access organization data even if I am removed'

14 Jul 2016

b'FantasyTote' disclosed a bug submitted by b'ketankumar_godhani' 
b'Weak HSTS age'

14 Jul 2016

b'Gratipay' disclosed a bug submitted by b'ashish_goanhacker' 
b'strengthen Diffie-Hellman (DH) key exchange parameters in grtp.co'

14 Jul 2016

b'Gratipay' disclosed a bug submitted by b'mackstaples' 
b'suppress version in Server header on gratipay.com or grtp.co'

14 Jul 2016

b'OLX' disclosed a bug submitted by b'mefkan' 
b'XSS yaman.olx.ph'

14 Jul 2016

b'Gratipay' disclosed a bug submitted by b'zuh4n' 
b'Directory listening in grtp.co'

14 Jul 2016

b'Gratipay' disclosed a bug submitted by b'dotnick' 
b"don't leak server version of grtp.co in error pages"

14 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'lukasreschke' 
b'Content-type sniffing leads to stored XSS in CMS Airship on Internet Explorer '

14 Jul 2016

b'Slack' disclosed a bug submitted by b'thisishrsh' 
b'File upload over private IM channel'

13 Jul 2016

b'LocalTapiola' disclosed a bug submitted by b'mlitchfield' 
b'Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage'

13 Jul 2016

b'Uber' disclosed a bug submitted by b'jutsuce' 
b'Directory Browsing and Open Git Repository on Uber Development Box '

13 Jul 2016

b'OLX' disclosed a bug submitted by b'thezawad' 
b'XSS @ yaman.olx.ph'

13 Jul 2016

1 ... 622 623 624 625 626 ... 731

BY DENIS WERNER - @NOBBD - IMPRESSUM