Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Veris' disclosed a bug submitted by b'reactors08' 
b'www.veris.in DOM based XSS'

22 Apr 2016

b'Coinbase' disclosed a bug submitted by b'atheistoffail' 
b'Sending payments via QR code does not require confirmation'

22 Apr 2016

b'Twitter' disclosed a bug submitted by b'ashish_goanhacker' 
b'xss in DM group name in twitter'

22 Apr 2016

b'Badoo' disclosed a bug submitted by b'yaworsk' 
b'AWS S3 Bucket hotornot-images permissions allow for listing and removing files'

22 Apr 2016

b'HackerOne' disclosed a bug submitted by b'pisarenko' 
b'Multiple issues with Markdown and URL parsing'

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'niemand' 
b'CSV Injection at the CSV export feature'

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'ashish_goanhacker' 
b'Abusing HOF rankings in limited circumstances'

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'techguynoob' 
b'User with Read-Only permissions can manually public disclosure the report '

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'paulos_' 
b'Possible XSS'

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'cablej' 
b'Websites opened from reports can change url of report page'

21 Apr 2016

b'HackerOne' disclosed a bug submitted by b'meals' 
b'Deleted name still present via mouseover functionality for user accounts'

21 Apr 2016

b'Shopify' disclosed a bug submitted by b'pranav_hivarekar' 
b'Privilege Escalation - A `MEMBER` with no ACCESS to `ORDERS` can still access the orders by using `Order Printer APP` '

20 Apr 2016

b'Mapbox' disclosed a bug submitted by b'hussain' 
b'Content Spoofing and Local Redirect in Mapbox Studio'

20 Apr 2016

b'WePay' disclosed a bug submitted by b'sl1m' 
b'2-step Verification bypass'

20 Apr 2016

b'Mapbox' disclosed a bug submitted by b'hussain' 
b'Stored Cross-Site Scripting in Map Share Page'

19 Apr 2016

b'Mapbox' disclosed a bug submitted by b'hussain' 
b'Disclosure of map information'

19 Apr 2016

b'Informatica' disclosed a bug submitted by b'konqi' 
b'[informatica.com] Blind SQL Injection'

19 Apr 2016

b'HackerOne' disclosed a bug submitted by b'paulos_' 
b'Reputation Manipulation (Theoretical)'

19 Apr 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Bypassing password authentication of users that have 2FA enabled'

18 Apr 2016

b'Imgur' disclosed a bug submitted by b'sl1m' 
b'SSRF and local file read in video to gif converter'

16 Apr 2016

1 ... 628 629 630 631 632 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM