Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sulemanmalik03' 
b'Server side information disclosure'

06 Jan 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar' 
b'Reflected XSS in a Navy website'

06 Jan 2017

b'OWOX, Inc.' disclosed a bug submitted by b'hackerish' 
b'Access to Grafana Dashboard'

06 Jan 2017

b'Coinbase' disclosed a bug submitted by b'bugdiscloseguys' 
b'Authentication Issue'

05 Jan 2017

b'Coinbase' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b'Content Injection error page'

05 Jan 2017

b'HackerOne' disclosed a bug submitted by b'deepankerchawla' 
b'Information Disclosure in /skills call'

05 Jan 2017

b'shopify-scripts' disclosed a bug submitted by b'an0n-j' 
b'Deleting Key-value pair from Frozen HASH or Clearing a Frozen HASH'

05 Jan 2017

b'Udemy' disclosed a bug submitted by b'csanuragjain' 
b'Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token'

05 Jan 2017

b'Udemy' disclosed a bug submitted by b'gribdan' 
b'AWS S3 bucket writable for authenticated aws user'

05 Jan 2017

b'Slack' disclosed a bug submitted by b'michiel' 
b'Subdomain takeover on podcasts.slack-core.com'

04 Jan 2017

b'Snapchat' disclosed a bug submitted by b's_p_q_r' 
b'[render.bitstrips.com] Stored XSS via an incorrect avatar property value'

04 Jan 2017

b'Slack' disclosed a bug submitted by b'imran_hadid' 
b'Store XSS'

01 Jan 2017

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Files Drop: WebDAV endpoint is leaking existence of resources'

01 Jan 2017

b'Legal Robot' disclosed a bug submitted by b'top' 
b'Server version disclosure'

31 Dec 2016

b'Legal Robot' disclosed a bug submitted by b'nullelite' 
b' No DMARC Record in legalrobot-uat.com'

31 Dec 2016

b'InVision' disclosed a bug submitted by b'nhavis' 
b'CORS Man-in-the-Middle account compromise'

31 Dec 2016

b'Informatica' disclosed a bug submitted by b'zephrfish' 
b'[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible'

31 Dec 2016

b'OpenSSL (IBB)' disclosed a bug submitted by b'guido' 
b'Double-free in X509 parsing'

30 Dec 2016

b'OpenSSL (IBB)' disclosed a bug submitted by b'guido' 
b'Remote client memory corruption in ssl_add_clienthello_tlsext()'

30 Dec 2016

b'Gratipay' disclosed a bug submitted by b'akash_9021' 
b'Username can be used to trick the victim on the name of www.gratipay.com'

30 Dec 2016

1 ... 627 628 629 630 631 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM