Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'e3xpl0it' 
b'Dom Based Xss'

09 May 2016

b'Uber' disclosed a bug submitted by b'blueberryinfosec' 
b'Session retention is present which reveals the customer info'

09 May 2016

b'Uber' disclosed a bug submitted by b'mdv' 
b'Reflected XSS via Unvalidated / Open Redirect in uber.com'

09 May 2016

b'Uber' disclosed a bug submitted by b'kirit1193' 
b'CRLF Injection in developer.uber.com'

09 May 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0)'

09 May 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b"CrashPlan Backup is Vulnerable Allowing to a DoS Attack Against Uber's Backups to ```backup.uber.com```"

09 May 2016

b'New Relic' disclosed a bug submitted by b'mimieux' 
b'Stored Cross-Site Scripting via Angular Template Injection'

09 May 2016

b'Uber' disclosed a bug submitted by b'mdv' 
b'Reflected XSS via Livefyre Media Wall in newsroom.uber.com'

09 May 2016

b'Dovecot' disclosed a bug submitted by b'bdwhitehat' 
b'Cross-Site Scripting Vulnerability in dovecot.fi'

09 May 2016

b'Dropbox' disclosed a bug submitted by b'gone' 
b'Dropbox apps Server side request forgery'

09 May 2016

b'Uber' disclosed a bug submitted by b'siddiki' 
b'XSS @ love.uber.com'

07 May 2016

b'Uber' disclosed a bug submitted by b'djadmin' 
b'Cross-site Scripting (XSS)'

06 May 2016

b'ThisData' disclosed a bug submitted by b'dirtycoder' 
b'STORED XSS FOUND'

06 May 2016

b'Coinbase' disclosed a bug submitted by b'apok' 
b"User's legal name could be changed despite front end controls being disabled"

05 May 2016

b'PHP' disclosed a bug submitted by b'hji' 
b'Integer overflow in ZipArchive::getFrom*'

05 May 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'linkks' 
b'SSL certificate public key less than 2048 bit'

05 May 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'arbaz_hussain' 
b'CSRF AT SUBSCRIBE TO LIST '

05 May 2016

b'ok.ru' disclosed a bug submitted by b'zoczus' 
b'Same-Origin Policy bypass on main domain - ok.ru'

04 May 2016

b'ok.ru' disclosed a bug submitted by b'zoczus' 
b'Same-Origin Policy Bypass #2 '

04 May 2016

b'Imgur' disclosed a bug submitted by b'kasser' 
b'Attack User Privacy Settings - X-Frame-Options missing on m.imgur.com/user/username/settings'

04 May 2016

1 ... 624 625 626 627 628 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM