Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'pr0tagon1st' 
b'Persistent input validation mail encoding vulnerability in the "just followed you" email notification.'

07 Apr 2016

b'Mail.Ru' disclosed a bug submitted by b'seifelsallamy' 
b'VERY DANGEROUS XSS STORED inside emails '

07 Apr 2016

b'New Relic' disclosed a bug submitted by b'xenonstory' 
b'Old CAPTCHA offers no protection'

07 Apr 2016

b'Gratipay' disclosed a bug submitted by b'shahzaib-shani' 
b'prevent content spoofing on /search'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'pavanw3b' 
b'Reflected XSS on Uber.com careers'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'XSS in getrush.uber.com '

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'HTML Escaping Error in the 404 Page on developer.uber.com/docs/'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'orange' 
b'uber.com may RCE by Flask Jinja2 Template Injection'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'CSV Injection in business.uber.com'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'XSS In archive.uber.com Due to Mime Sniffing in IE'

06 Apr 2016

b'Shopify' disclosed a bug submitted by b'ancst' 
b'Stored XSS via "Free Shipping" option (Discounts)'

05 Apr 2016

b'HackerOne' disclosed a bug submitted by b'lukasreschke' 
b'External links should use rel="noopener" or use the redirect service'

05 Apr 2016

b'Shopify' disclosed a bug submitted by b'secalert' 
b'XSS on https://app.shopify.com/'

05 Apr 2016

b'HackerOne' disclosed a bug submitted by b'paresh_parmar' 
b'New hacktivity view discloses report IDs of non-public reports'

05 Apr 2016

b'Gratipay' disclosed a bug submitted by b'niputiwari' 
b'An adversary can harvest email address for spamming.'

05 Apr 2016

b'Gratipay' disclosed a bug submitted by b'niputiwari' 
b'Getting Error Message and in use python version 2.7 is exposed.'

05 Apr 2016

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'AWS S3 bucket writeable for authenticated aws users'

05 Apr 2016

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'?????????? Twitter ?? ?????? ??????? ?? ! + ????????? ????? ?? ???????'

04 Apr 2016

b'Zendesk' disclosed a bug submitted by b'zombiehelp54' 
b'[CRITICAL] CSRF leading to account take over'

04 Apr 2016

b'ownCloud' disclosed a bug submitted by b'hanno' 
b'Exploiting unauthenticated encryption mode'

04 Apr 2016

1 ... 630 631 632 633 634 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM