Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Dovecot' disclosed a bug submitted by b'thalaivarsubu' 
b'nginx server vulnerable'

17 May 2016

b'Veris' disclosed a bug submitted by b'kanwar' 
b'Text injection can be used in phishing 404 page and should not include attacker text'

17 May 2016

b'PHP' disclosed a bug submitted by b'cyberpunkych' 
b'Null pointer deref (segfault) in stream_context_get_default'

17 May 2016

b'Coinbase' disclosed a bug submitted by b'hisham' 
b'Email leak in transcations in Android app'

17 May 2016

b'Sucuri' disclosed a bug submitted by b'rj01' 
b'Manipulating of Sucuri.net (List Subscription) Emails (HTML/Script Injection)'

16 May 2016

b'InVision' disclosed a bug submitted by b'rootxflood' 
b"CRITICAL : Delete Boards Admin's ( or any other user ) comment. ( IDOR ) "

16 May 2016

b'Badoo' disclosed a bug submitted by b'symbiansymoh' 
b'Badoo and Hotornot User Disclosure'

16 May 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahmedkhouja' 
b'Email Authentication Bypass'

16 May 2016

b'Uber' disclosed a bug submitted by b'jouko' 
b'Stored XSS in drive.uber.com WordPress admin panel'

14 May 2016

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b"Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi"

14 May 2016

b'Veris' disclosed a bug submitted by b'sasi2103' 
b'Password(s) can be found via login process.'

13 May 2016

b'Veris' disclosed a bug submitted by b'yaworsk' 
b"Complete or Edit Another User's Profile"

13 May 2016

b'Gratipay' disclosed a bug submitted by b'trabajoduro' 
b'Vulnerable to clickjacking'

13 May 2016

b'Veris' disclosed a bug submitted by b'bugs3ra' 
b'Captcha Bypass enable login bruteforce'

13 May 2016

b'Veris' disclosed a bug submitted by b'eboda' 
b'Stored XSS in member book'

13 May 2016

b'Veris' disclosed a bug submitted by b'ashish_goanhacker' 
b'XSS in Asset name'

13 May 2016

b'New Relic' disclosed a bug submitted by b'ahsantahirat' 
b'New Relic - Session Hijacking'

13 May 2016

b'Veris' disclosed a bug submitted by b'zuh4n' 
b"Stored XSS on 'Badges' page"

13 May 2016

b'Gratipay' disclosed a bug submitted by b'fallen' 
b"don't expose path of Python "

13 May 2016

b'APITest.IO' disclosed a bug submitted by b'mogli' 
b'Clickjacking: X-Frame-Options header missing'

12 May 2016

1 ... 634 635 636 637 638 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM