Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'iad' 
b'Disclosure of ip addresses in local network of uber'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'SMS Flood with Update Profile '

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Changing Driver Passwords With Only an Authenticated Session (no password, no email)'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Uploading Plain Text to uber-documents.s3.amazonaws.com Through the Driver Document Upload Page'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'Uber password reset link EMAIL FLOOD'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'mini' 
b'Privilege escalation to allow non activated users to login and use uber partner ios app'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t' 
b'Possibility to brute force invite codes in riders.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'patrik' 
b'Stored Cross Site Scripting [SELF] in partners.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'blueberryinfosec' 
b'Create account in uber without signup form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'xss001' 
b'Self-XSS Vulnerability on Password Reset Form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'rohk' 
b'Active Email Hyperlink Sent on riders.uber.com'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'sasi2103' 
b'XML Parser Bug: XXE over which leads to RCE'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'mugeesahmed' 
b'XSS in Blog '

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'ahsantahirat' 
b'Ngnix Server version disclosure'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'muzammilabbaskayani' 
b'Bypassing Password Reset '

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'ullger' 
b'Bypass password complexity requirements on passsword reset page'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'bashlogic' 
b'node.drchrono.com - Information Disclosure and Windows Host Exposed'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'Stored XSS via AngularJS Injection'

13 Jun 2016

b'New Relic' disclosed a bug submitted by b'shailesh4594' 
b'Open redirection bypass'

13 Jun 2016

1 ... 627 628 629 630 631 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM