Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'malcolmx' 
b'Cross Site Request Forgery (CSRF)'

20 Jul 2016

b'Gratipay' disclosed a bug submitted by b'sh4dow' 
b'Username .. (double dot) should be restricted or handled carefully'

20 Jul 2016

b'LeaseWeb' disclosed a bug submitted by b'arbaz_hussain' 
b'Directory Listening'

20 Jul 2016

b'Gratipay' disclosed a bug submitted by b'jackds' 
b'limit HTTP methods on other domains'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'bugdiscloseguy' 
b'Read-only share recipient can restore old versions of file'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'detroitsmash' 
b"Uploading files to a folder where invited user don't have any EDIT privilege"

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'fransrosen' 
b"Stored XSS on Share-popup of a directory's Gallery-view"

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'apok' 
b'Log pollution can lead to HTML Injection.'

19 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'ishahriyar' 
b'Nextcloud server software: Content Spoofing'

19 Jul 2016

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Stealing livechat token and using it to chat as the user - user information disclosure '

19 Jul 2016

b'drchrono' disclosed a bug submitted by b'1337_inj3c70r' 
b'Bug Report '

19 Jul 2016

b'Shopify' disclosed a bug submitted by b'zseano' 
b'https://windsor.shopify.com/ takeover'

18 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'bug_cat' 
b'newsletter.nextcloud.com: Bypass firewall protection'

18 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'roshanpty' 
b'The application uses basic authentication.'

18 Jul 2016

b'Mail.Ru' disclosed a bug submitted by b'hunter' 
b'Possibility to attach any mobile number to any email'

18 Jul 2016

b'OLX' disclosed a bug submitted by b'c4u53' 
b'Reflected XSS at yaman.olx.ph'

18 Jul 2016

b'Nextcloud' disclosed a bug submitted by b'secureashishpathak' 
b'nextcloud.com: Mail Bombing ( No Rate Limiting On Sending Emails On Contact us Page)'

17 Jul 2016

b'Shopify' disclosed a bug submitted by b'fin1te' 
b'Potentially Sensitive Information on GitHub'

17 Jul 2016

b'Shopify' disclosed a bug submitted by b'fin1te' 
b'Authentication Bypass on Icinga monitoring server'

17 Jul 2016

b'Gratipay' disclosed a bug submitted by b'roshanpty' 
b'The contribution save option seem to be vulnerable to CSRF'

17 Jul 2016

1 ... 623 624 625 626 627 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM