Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'jreynolds' 
b'developer.uber.com/404 and developer.uber.com/docs/404 are susceptible to iframes'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'sw3nlab' 
b'Disclosure of ways to the site root'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'kusl' 
b'Information disclosure at lite.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'decoder' 
b'Easy spam with USE My PHONE Feature'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'durga' 
b'Session Impersonation in riders.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'iad' 
b'Disclosure of ip addresses in local network of uber'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'SMS Flood with Update Profile '

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Changing Driver Passwords With Only an Authenticated Session (no password, no email)'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Uploading Plain Text to uber-documents.s3.amazonaws.com Through the Driver Document Upload Page'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'anish2good' 
b'Uber password reset link EMAIL FLOOD'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'mini' 
b'Privilege escalation to allow non activated users to login and use uber partner ios app'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t' 
b'Possibility to brute force invite codes in riders.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'patrik' 
b'Stored Cross Site Scripting [SELF] in partners.uber.com'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'blueberryinfosec' 
b'Create account in uber without signup form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'xss001' 
b'Self-XSS Vulnerability on Password Reset Form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'rohk' 
b'Active Email Hyperlink Sent on riders.uber.com'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'sasi2103' 
b'XML Parser Bug: XXE over which leads to RCE'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'mugeesahmed' 
b'XSS in Blog '

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'ahsantahirat' 
b'Ngnix Server version disclosure'

13 Jun 2016

1 ... 632 633 634 635 636 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM