Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ian Dunn' disclosed a bug submitted by b'e3amn2l' 
b'constant cache_page_secret in regolith'

30 Dec 2016

b'Gratipay' disclosed a bug submitted by b'aa23' 
b'Session Fixation At Logout /Session Misconfiguration'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Secure Pages Include Mixed Content'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Certificate signed using SHA-1'

29 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Cookie HttpOnly Flag Not Set '

29 Dec 2016

b'Phabricator' disclosed a bug submitted by b'e3amn2l' 
b'Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)'

29 Dec 2016

b'VK.com' disclosed a bug submitted by b'canamii' 
b'vk.com/login.php '

29 Dec 2016

b'Ian Dunn' disclosed a bug submitted by b'e3amn2l' 
b'unchecked unserialize usage in WordPress-Functionality-Plugin-Skeleton/functionality-plugin-skeleton.php'

29 Dec 2016

b'Trello' disclosed a bug submitted by b'thalaivarsubu' 
b'The contact page is vulnerable to self-XSS via upload file name'

28 Dec 2016

b'Open-Xchange' disclosed a bug submitted by b'haquaman' 
b'Tab nabbing via window.opener'

28 Dec 2016

b'Open-Xchange' disclosed a bug submitted by b'haquaman' 
b'Selecting encryption for email with drive attachment overrides the drive email password'

28 Dec 2016

b'Open-Xchange' disclosed a bug submitted by b'haquaman' 
b'Stored XSS in Template Documents'

28 Dec 2016

b'PortSwigger Web Security' disclosed a bug submitted by b'wra-ggs' 
b'HTTP OPTION Method is Enabled on portswigger.net '

27 Dec 2016

b'Gratipay' disclosed a bug submitted by b'dr-cdqh' 
b'Content type incorrectly stated'

27 Dec 2016

b'Gratipay' disclosed a bug submitted by b'aa23' 
b'User Enumeration'

27 Dec 2016

b'Mail.Ru' disclosed a bug submitted by b'cyberpunkych' 
b'Stored XSS ?? street-combats.mail.ru'

26 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'cyriac' 
b'SQL Injection in sijoitustalous_peruutus (viestinta.lahitapiola.fi)'

26 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'Open Redirect (verkkopalvelu.lahitapiola.fi)'

26 Dec 2016

b'Instacart' disclosed a bug submitted by b'sameoldstory' 
b'Access private list metadata'

24 Dec 2016

b'Dovecot' disclosed a bug submitted by b'c4pt4ink1dd' 
b'Directory listing'

24 Dec 2016

1 ... 624 625 626 627 628 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM