Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'http://digital.starbucks.com/ Creation of Google G Suite Account on Behalf of starbucks. '

17 Jan 2017

b'Starbucks' disclosed a bug submitted by b'ddworken' 
b'Persistent XSS in www.starbucks.com'

17 Jan 2017

b'Starbucks' disclosed a bug submitted by b'yappare' 
b'Improper Validation on Cancel Link Redirect'

17 Jan 2017

b'Instacart' disclosed a bug submitted by b'footstep' 
b'Authentication Bypass in Updating Personal Information'

17 Jan 2017

b'Imgur' disclosed a bug submitted by b'strukt' 
b'Stored XSS in albums on http://m.imgur.com/'

17 Jan 2017

b'Algolia' disclosed a bug submitted by b'malcolmx' 
b'2-factor authentication bypass'

17 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'HTTP-Basic Authentication on logs.nextcloud.com'

17 Jan 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'm7mdharoun' 
b'xss in Theme http://bztfashion.booztx.com'

16 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dremos' 
b'Avatar image upload and bypass real image verification '

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'kelia' 
b'ruby DoS https://www.mruby.science'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Type confusion in wrap_decimal leading to memory corruption'

15 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Null pointer dereference due to TOCTTOU bug in mrb_time_initialize'

15 Jan 2017

b'Twitter' disclosed a bug submitted by b'mishre' 
b"Twitter for android is exposing user's location to any installed android app"

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Disclosure of administrators via JSON on nextcloud.com Wordpress'

13 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'dem0n' 
b'WordPress <= 4.6.1 Stored XSS Via Theme File'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'id-is-vulnerable' 
b'Create New User Whilst Logged On'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'meals' 
b'Parameter Manipulation allowed for viewing of other user\xe2\x80\x99s teavana.com orders'

13 Jan 2017

b'Starbucks' disclosed a bug submitted by b'e3xpl0it' 
b'Dom Based Xss DIV.innerHTML parameters store.starbucks*'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'Bad content-type in response header when getting document can lead to html injection'

12 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'trichimtrich' 
b'URI scheme bypass in mail app lead to HTML content spoof and opener control'

12 Jan 2017

1 ... 624 625 626 627 628 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM