Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'concrete5' disclosed a bug submitted by b'egix' 
b'Multiple Cross Site Request Forgery Vulnerabilities in Concrete5 version 5.7.3.1'

26 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'ahmed_saleh' 
b'Stored number of clicks in the Deposits button'

26 Jun 2016

b'Pornhub' disclosed a bug submitted by b'mak' 
b'Access to repository on https://netreact.eu/hubtraffic/ with full access to source and commit privileges'

25 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'ahmed_saleh' 
b'Bypass logout '

25 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'tayyab-qadir' 
b'Urgent Fix Balance Limit bypass '

25 Jun 2016

b'Slack' disclosed a bug submitted by b'computerality' 
b'OSX slack:// protocol handler javascript injection'

24 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'zeroknife' 
b'REG: Content provider information leakage'

24 Jun 2016

b'HackerOne' disclosed a bug submitted by b'arneswinnen' 
b'Web Authentication Endpoint Credentials Brute-Force Vulnerability'

23 Jun 2016

b'Bime' disclosed a bug submitted by b'michiel' 
b'Subdomain takeover due to unclaimed Amazon S3 bucket on a2.bime.io'

22 Jun 2016

b'ThisData' disclosed a bug submitted by b'7h0r4pp4n' 
b'Host Header Poisoning in thisdata.com'

22 Jun 2016

b'bitaccess' disclosed a bug submitted by b'geekboy' 
b'BYASSING OTP Verification'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'awake' 
b'CSV Macro injection in Video Manager (CEMI)'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'Public Facing Barracuda Login'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'mak' 
b'Multiple endpoints are vulnerable to XML External Entity injection (XXE) '

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'PornIQ Reflected Cross-Site Scripting'

22 Jun 2016

b'Mail.Ru' disclosed a bug submitted by b'samidrif' 
b'Code source discloure & ability to get database information "SQL injection" in [townwars.mail.ru]'

22 Jun 2016

b'Romit' disclosed a bug submitted by b'eboda' 
b'Session Fixation'

22 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'japongskie' 
b'No Rate Limiting on stats.nextcloud.com login'

22 Jun 2016

b'Zomato' disclosed a bug submitted by b'dejavuln' 
b'Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)'

22 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'vivek_patil' 
b'WordPress Vulnerabilities: User Enumeration, Vulnerable Akismet Plugin, XML-RPC Interface available'

22 Jun 2016

1 ... 627 628 629 630 631 ... 731

BY DENIS WERNER - @NOBBD - IMPRESSUM