Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'dejavuln' 
b'Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)'

22 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'vivek_patil' 
b'WordPress Vulnerabilities: User Enumeration, Vulnerable Akismet Plugin, XML-RPC Interface available'

22 Jun 2016

b'Slack' disclosed a bug submitted by b'mkbb' 
b'Unauthenticated Access to some old file thumbnails '

21 Jun 2016

b'HackerOne' disclosed a bug submitted by b'jthetechguy' 
b'All information is not removed from published reports'

21 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'armfox97' 
b'Deny access to download.nextcloud.com + folders'

21 Jun 2016

b'Shopify' disclosed a bug submitted by b'ksaurabh' 
b'Fetching external resources through svg images'

21 Jun 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'Heap corruption in string.c tr_trans() due to undersized buffer'

21 Jun 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'Heap corruption in DateTime.strftime() on 32 bit for certain format strings'

21 Jun 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'StringIO strio_getline() can divulge arbitrary memory'

21 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'bugdiscloseguy' 
b'Email ID Disclosure.'

20 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'johnd' 
b'No rate limiting on password protected shared file link'

20 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'gaurang' 
b'No permission set on Activities [Android App]'

20 Jun 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'ebrietas' 
b'Source code disclosure on https://107.23.69.180'

20 Jun 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'shubham' 
b'CSRF in login form would led to account takeover'

20 Jun 2016

b'Mail.Ru' disclosed a bug submitted by b'cyberpunkych' 
b'?????? ?????????? ????? JSONP (XXSI)'

20 Jun 2016

b'Mail.Ru' disclosed a bug submitted by b'isox' 
b'bgplay.mail.ru'

20 Jun 2016

b'New Relic' disclosed a bug submitted by b'karthic' 
b'Html injection in monitor name textbox'

19 Jun 2016

b'New Relic' disclosed a bug submitted by b'charlie_n_b' 
b'Potential Subdomain Takeover - http://storefront.newrelic.com/'

19 Jun 2016

b'LeaseWeb' disclosed a bug submitted by b'bhanushali' 
b'Server version is disclosure in http://leasewebnoc.com/'

19 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'koolacac' 
b'Bruteforce attack is possible on newsletter.nextcloud.com'

19 Jun 2016

1 ... 623 624 625 626 627 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM