Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'SQL Injection /webApp/sijoitustalous_peruutus locId parameter (viestinta.lahitapiola.fi)'

08 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'bobrov' 
b'SQL Injection /webApp/oma_conf ctx parameter (viestinta.lahitapiola.fi)'

08 Dec 2016

b'HackerOne' disclosed a bug submitted by b'zseano' 
b'Bypass rate limiting on /users/password (possibly site-wide rate limit bypass?)'

08 Dec 2016

b'OLX' disclosed a bug submitted by b'123456789100' 
b'REFLECTED CROSS SITE SCRIPTING IN OLX'

08 Dec 2016

b'Gratipay' disclosed a bug submitted by b'promx' 
b'CSRF csrftoken in cookies'

07 Dec 2016

b'Instacart' disclosed a bug submitted by b'archers123' 
b'User Information sent to client through websockets'

07 Dec 2016

b'PortSwigger Web Security' disclosed a bug submitted by b'jelmer' 
b'JSBeautifier BApp: Race condition leads to memory disclosure'

07 Dec 2016

b'Trello' disclosed a bug submitted by b'esmile' 
b'SVG Uploads / Attachments can be viewed by anyone. '

06 Dec 2016

b'GitLab' disclosed a bug submitted by b'fransrosen' 
b'Mailgun misconfiguration leads to email snooping and postmaster@-access on email.mg.gitlab.com'

06 Dec 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'State filter in IssuableFinder allows attacker to delete all issues and merge requests'

06 Dec 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'benkhlifafahmi' 
b'account.ubnt.com CSRF'

05 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b"[Nextcloud 9.0.53] Content Spoofing in 'trustDomain' parameter"

05 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'madhur_bhargava' 
b'Login Hints on Admin Panel'

05 Dec 2016

b'New Relic' disclosed a bug submitted by b'martijn' 
b'CSRF vulnerability that allows an attacker to purge plugin metric data'

05 Dec 2016

b'Sucuri' disclosed a bug submitted by b'tw1sted' 
b'Administrator Access to grafana instance logstash2.sucuri.net with default credentials'

05 Dec 2016

b'Python (IBB)' disclosed a bug submitted by b'johnleitch' 
b'chain.__setstate__ Type Confusion'

05 Dec 2016

b'Python (IBB)' disclosed a bug submitted by b'johnleitch' 
b'LZMADecompressor.decompress Use After Free'

05 Dec 2016

b'VK.com' disclosed a bug submitted by b'povargek' 
b'???????: ????????? ??????? ????? ??????? ??????????? ??????????? ????????? ? ???????? ?? ??????????.'

04 Dec 2016

b'Nextcloud' disclosed a bug submitted by b'hackerwahab' 
b'BruteForce in to Admin Account'

04 Dec 2016

b'Shopify' disclosed a bug submitted by b'shailesh4594' 
b'[ecommerce.shopify.com] Invalidated redirection'

04 Dec 2016

1 ... 633 634 635 636 637 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM