Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'gninrepoli' 
b'Reflected XSS in Gallery App'

03 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'\\OCA\\DAV\\CardDAV\\ImageExportPlugin allows serving arbitrary data with user-defined or empty mimetype'

03 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'vn-49-d1' 
b'IDOR - Disable sharing'

03 Dec 2016

b'Python' disclosed a bug submitted by b'artem' 
b'Type confusion in FutureIter_throw() which may potentially lead to an arbitrary code execution'

03 Dec 2016

b'Dropbox' disclosed a bug submitted by b'fbogner' 
b'Subtile Code Injection Vulnerability in Dropbox for Windows'

03 Dec 2016

b'Badoo' disclosed a bug submitted by b'tsug0d' 
b'Unvalidated redirect on team.badoo.com'

03 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'config' 
b'Content (Text) Injection at NextCloud Server 9.0.52 - via http://custom_nextcloud_url/remote.php/dav/files/ '

02 Dec 2016

b'QIWI' disclosed a bug submitted by b'kxyry' 
b'[rubm.qiwi.com] Yui charts.swf XSS'

01 Dec 2016

b'Slack' disclosed a bug submitted by b'kazan71p' 
b'Information Disclosure on stun.screenhero.com'

30 Nov 2016

b'PortSwigger Web Security' disclosed a bug submitted by b'sp1d3rs' 
b'Order-phishing via Payment ID URL'

30 Nov 2016

b'Yelp' disclosed a bug submitted by b'haquaman' 
b'Self-XSS via location cookie city field when getting suggestions for a new location'

30 Nov 2016

b'Trello' disclosed a bug submitted by b'ak1t4' 
b'Can run arbitrary script on em.trello.com'

30 Nov 2016

b'PortSwigger Web Security' disclosed a bug submitted by b'opnsec' 
b'XSS in IE11 on portswigger.net via Flash'

30 Nov 2016

b'HackerOne' disclosed a bug submitted by b'japzdivino' 
b'Internal attachments can be exported via "Export as .zip" feature'

30 Nov 2016

b'Zendesk' disclosed a bug submitted by b'gribdan' 
b'AWS S3 bucket writable for authenticated aws user'

29 Nov 2016

b'Shopify' disclosed a bug submitted by b'clarck-owen' 
b'Able to Login deactivated staff account in shopify app mobile'

29 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'arneswinnen' 
b'Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com'

29 Nov 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'vibhuti_i' 
b'IDOR Causing Deletion of any account'

29 Nov 2016

b'HackerOne' disclosed a bug submitted by b'faisalahmed' 
b'Partial disclosure of report activity through new "Export as .zip" feature'

29 Nov 2016

b'Slack' disclosed a bug submitted by b'narendrabhati' 
b'Rate-limit bypass'

28 Nov 2016

1 ... 628 629 630 631 632 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM