Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Veris' disclosed a bug submitted by b'itly' 
b"Critical IDOR - Set anyone's Terminal Data remotely"

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b"Critical IDOR - Get anyone's Terminal Data remotely"

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Password reset link is not Expiring'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Multiple Stored XSS'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Missing Server Side Validation of CSRF Middleware Token in Change Password Request'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Multiple Stored XSS on Sanbox.veris.in through Veris Frontdesk Android App'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Can select any Parent while creating new Venue'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get Rules of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Make Rule for Any Group & Any Venue remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get venue data of any organization remotely'

12 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t1v' 
b'Enumerating userIDs with phone numbers'

11 Jun 2016

b'Moneybird' disclosed a bug submitted by b'krankopwnz' 
b'Reflected XSS in Backend search'

11 Jun 2016

b'Sucuri' disclosed a bug submitted by b'jackds' 
b'CRLF/HTTP header injection www.sucuri.net'

10 Jun 2016

b'Badoo' disclosed a bug submitted by b'nikitchenko' 
b'????????? ????????? ???????? ???????????'

09 Jun 2016

b'Binary.com' disclosed a bug submitted by b'ameer0x0a' 
b'CJ vulnerability in subdomain'

09 Jun 2016

b'Trello' disclosed a bug submitted by b'thezawad' 
b'XSS in Jetpack plugin'

08 Jun 2016

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'Possibly big authorization problem in L\xc3\xa4hitapiola\xc2\xb4s varainhoito'

08 Jun 2016

b'Veris' disclosed a bug submitted by b'footstep' 
b'Unauthenticated CSRF(User can input any value for CSRF Token)'

08 Jun 2016

b'Phabricator' disclosed a bug submitted by b'fnqgpc' 
b'Full path disclosure'

08 Jun 2016

b'HackerOne' disclosed a bug submitted by b'c666a323be94d57' 
b'RCE in profile picture upload'

08 Jun 2016

1 ... 634 635 636 637 638 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM