Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OLX' disclosed a bug submitted by b'thezawad' 
b'Manipulating joinolx.com Job Vacancy alert subscription emails (HTML Injection / Script Injection)'

15 Aug 2016

b'Gratipay' disclosed a bug submitted by b'kuskumar' 
b'csrf_token cookie don\'t have the flag "HttpOnly"'

14 Aug 2016

b'Zomato' disclosed a bug submitted by b'spam404' 
b'XSS on zomato.com'

14 Aug 2016

b'Gratipay' disclosed a bug submitted by b'mmyamin' 
b'bring grtp.co up to A grade on SSLLabs'

13 Aug 2016

b'Instacart' disclosed a bug submitted by b'introvertmac' 
b'CSRF with redeem coupon request '

13 Aug 2016

b'Veris' disclosed a bug submitted by b'ak1t4' 
b'Internal server error 500 at log.veris.in '

13 Aug 2016

b'New Relic' disclosed a bug submitted by b'praseudo' 
b'Login CSRF vulnerability'

12 Aug 2016

b'New Relic' disclosed a bug submitted by b'rahul_ch' 
b'All Active user sessions should be destroyed when user change his password!'

12 Aug 2016

b'concrete5' disclosed a bug submitted by b'khalidamin511' 
b'CSRF Full Account Takeover'

12 Aug 2016

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'Bypassing callback_url validation on Digits'

12 Aug 2016

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b"Bypassing Digits web authentication's host validation with HPP"

12 Aug 2016

b'Uber' disclosed a bug submitted by b'pooja_lodaya' 
b'User Enumeration and Information Disclosure'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'enmach' 
b'Brute Force Amplification Attack'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'ak1t4' 
b'Content injection on 404 error page at faspex.uber.com'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'orange' 
b'CBC "cut and paste" attack may cause Open Redirect(even XSS)'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Enumeration of Invite Codes Allows for Estimating Number of Uber Riders'

12 Aug 2016

b'Twitter' disclosed a bug submitted by b'mazen160' 
b'XSS in the "Poll" Feature on Twitter.com'

12 Aug 2016

b'Uber' disclosed a bug submitted by b'albinowax' 
b'Stored XSS on developer.uber.com via admin account compromise'

12 Aug 2016

b'Mail.Ru' disclosed a bug submitted by b'paresh_parmar' 
b'XSS at af.attachmail.ru'

12 Aug 2016

b'OLX' disclosed a bug submitted by b'konqi' 
b'Arbitrary File Reading'

12 Aug 2016

1 ... 625 626 627 628 629 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM