Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Email Attachment'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'cyriac' 
b'Bypass the resend limit in Send Invites'

22 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'dem0n' 
b' Spam Some one using (user.saveInvite) system'

22 Nov 2016

b'bitaccess' disclosed a bug submitted by b'raghu42' 
b'Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error. '

21 Nov 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open redirect and XSS in supporthiring.shopify.com'

21 Nov 2016

b'HackerOne' disclosed a bug submitted by b'sasi2103' 
b'Researcher gets email updates on a private program after he/she quits that program.'

21 Nov 2016

b'Slack' disclosed a bug submitted by b'linkks' 
b'RC4 cipher suites detected on status.slack.com'

18 Nov 2016

b'Instacart' disclosed a bug submitted by b'sameoldstory' 
b'Full access to any list'

18 Nov 2016

b'VK.com' disclosed a bug submitted by b'linkks' 
b'????'

18 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'japzdivino' 
b'Nginx version disclosure via response header'

18 Nov 2016

b'Slack' disclosed a bug submitted by b'asanso' 
b'CSRF in github integration'

18 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'rpinuaga' 
b'Reflected XSS in www.lahitapiola.fi (/cs/Satellite) using Oracle WebCenter -page'

17 Nov 2016

b'LocalTapiola' disclosed a bug submitted by b'rpinuaga' 
b'Oracle WebCenter Sites Support Tools available and Information disclosure (/cs/Satellite)'

17 Nov 2016

b'OWOX, Inc.' disclosed a bug submitted by b'gaurang' 
b'Subdomain Takeover on http://kiosk.owox.com/'

17 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'hussain_0x3c' 
b'Cross-Site Scripting Stored On Rich Media'

17 Nov 2016

b'Pushwoosh' disclosed a bug submitted by b'ameerpornillos' 
b'Administrator Access To Management Console'

17 Nov 2016

b'Ruby' disclosed a bug submitted by b'guido' 
b'Arbitrary heap overread in strscan on 32 bit Ruby, patch included'

17 Nov 2016

b'Instacart' disclosed a bug submitted by b'sameoldstory' 
b'Seemingly sensitive information at /api/v2/zones'

16 Nov 2016

b'SecNews' disclosed a bug submitted by b'sameoldstory' 
b'DOM based XSS in search functionality'

16 Nov 2016

b'Coinbase' disclosed a bug submitted by b'kaleemgiet' 
b'Runtime manipulation iOS app breaking the PIN'

16 Nov 2016

1 ... 635 636 637 638 639 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM