Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'my_life_is_bug_pls_fix_me' 
b'a stored xss in slack integration https://onerror.slack.com/services/import'

22 May 2016

b'Algolia' disclosed a bug submitted by b'my_life_is_bug_pls_fix_me' 
b'an xss issue'

22 May 2016

b'Slack' disclosed a bug submitted by b'sick-sec' 
b'Trick make all fixed open redirect links vulnerable again'

22 May 2016

b'New Relic' disclosed a bug submitted by b'ryhanson' 
b'Stored XSS through Angular Expression Sandbox Escape'

22 May 2016

b'concrete5' disclosed a bug submitted by b'jfolkins' 
b'ProBlog 2.6.6 CSRF Exploit'

22 May 2016

b'New Relic' disclosed a bug submitted by b'arbaz_hussain' 
b'SUBDOMAIN TAKEOVER(FIXED)'

21 May 2016

b'Vimeo' disclosed a bug submitted by b'tomash' 
b'Private, embeddable videos leaks data through Facebook & Open Graph'

21 May 2016

b'New Relic' disclosed a bug submitted by b'shailesh4594' 
b'Open redirection on login'

21 May 2016

b'HackerOne' disclosed a bug submitted by b'pisarenko' 
b'DOS Report FILE html inside <code> in markdown'

21 May 2016

b'Xero' disclosed a bug submitted by b'dly' 
b'Default.aspx exposing full path and other info on wip.origin-community.xero.com'

20 May 2016

b'New Relic' disclosed a bug submitted by b'geeknik' 
b'https://rpm.newrelic.com/.htaccess file is world readable'

20 May 2016

b'New Relic' disclosed a bug submitted by b'trabajoduro_2' 
b'Clickjacking on authenticated pages which is inscope for New Relic'

20 May 2016

b'Xero' disclosed a bug submitted by b'droope' 
b'Insecure Payment System Integration'

20 May 2016

b'LocalTapiola' disclosed a bug submitted by b'aaditya_purani' 
b'Abusing and Hacking the SMTP Server secure.lahitapiola.fi'

20 May 2016

b'Dovecot' disclosed a bug submitted by b'hari-cybex' 
b'DIrectory Listing Found'

20 May 2016

b'OpenSSL' disclosed a bug submitted by b'jurajsomorovsky' 
b'Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)'

19 May 2016

b'Informatica' disclosed a bug submitted by b'psychomantis' 
b'[now.informatica.com] Reflective Xss'

19 May 2016

b'HackerOne' disclosed a bug submitted by b'ala_arfaoui' 
b'HackerOne Important Emails Notification are sent in clear-text'

19 May 2016

b'HackerOne' disclosed a bug submitted by b'teo' 
b'LinkedIN URL should be HTTPS'

18 May 2016

b'Phabricator' disclosed a bug submitted by b'vorpal' 
b'Passphrase credential lock bypass'

18 May 2016

1 ... 633 634 635 636 637 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM