Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Skyliner' disclosed a bug submitted by b'bobrov' 
b'[skyliner.io / qa.skyliner.io] Open Redirect'

29 Sep 2016

b'Mail.Ru' disclosed a bug submitted by b'c37hun' 
b'Full Path Disclosure'

29 Sep 2016

b'Slack' disclosed a bug submitted by b'thisishrsh' 
b'Creating Post on a restricted channel'

29 Sep 2016

b'VK.com' disclosed a bug submitted by b'ciph3r7r0ll' 
b'Issue in the implementation of captcha and race condition'

29 Sep 2016

b'itBit Exchange' disclosed a bug submitted by b'smitgajra007' 
b'Open Redirect in https://exchange.itbit.com'

28 Sep 2016

b'Legal Robot' disclosed a bug submitted by b'shani_1' 
b"AWS S3 website can't serve security headers, may allow clickjacking"

28 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'tbmnull' 
b'stored SELF xss on Basic Google Maps Placemarks Settings plugin'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'ethnicalhacker' 
b'Potentially vulnerable version of Apache software in and default files on https://iandunn.name/'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'superngorks' 
b'bypass to csv injection'

27 Sep 2016

b'Ian Dunn' disclosed a bug submitted by b'jshindl' 
b'Send emails to all users using Camptix'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'jigarthakkar39' 
b'Physical Access to Mobile App Allows Local Attribute Updates without Authentication'

27 Sep 2016

b'Uber' disclosed a bug submitted by b'bobrov' 
b'Open Redirect in m.uber.com'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'tgpanackal' 
b'Unvalidated/Open Redirect allowing attackers to implement phishing attack'

27 Sep 2016

b'Shopify' disclosed a bug submitted by b'ishwar_prasad_bhat' 
b'Payment gateway status transferred to Shopify without authentication'

27 Sep 2016

b'Trello' disclosed a bug submitted by b'cablej' 
b'SSRF in account webhook (through API)'

27 Sep 2016

b'Instacart' disclosed a bug submitted by b'cablej' 
b'Issues with uploading list images'

26 Sep 2016

b'Instacart' disclosed a bug submitted by b'hussain_0x3c' 
b'Cookie-Based Injection'

26 Sep 2016

b'Django' disclosed a bug submitted by b'bobrov' 
b'CSRF protection bypass on any Django powered site via Google Analytics'

26 Sep 2016

b'Trello' disclosed a bug submitted by b'mubassir92' 
b'Subdomain Take over & username enemuration'

26 Sep 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[odnoklassniki.ru] XSS via Host'

26 Sep 2016

1 ... 628 629 630 631 632 ... 756

BY DENIS WERNER - @NOBBD - IMPRESSUM