Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zopim' disclosed a bug submitted by b'punkrock' 
b'Full Sub Domain Takeover at wx.zopim.net'

26 Oct 2016

b'OLX' disclosed a bug submitted by b'juliocesar' 
b'Full path disclosure vulnerability at http://corporate.olx.ph'

26 Oct 2016

b'CloudFlare' disclosed a bug submitted by b'albinowax' 
b'Reflected XSS on partners.cloudflare.com'

26 Oct 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service attack(window object) on brave browser'

25 Oct 2016

b'Brave Software' disclosed a bug submitted by b'ibram' 
b'[ios] Address bar spoofing in Brave for iOS'

25 Oct 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'Private Photo Disclosure - /user/stream_photo_attach?load=album&id= endpoint'

25 Oct 2016

b'Harvest' disclosed a bug submitted by b'pradeepch99' 
b'CSRF token fixation in Sign in with Google'

25 Oct 2016

b'Sucuri' disclosed a bug submitted by b'bobrov' 
b'[support.sucuri.net] CRLF Injection'

24 Oct 2016

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[qiwi.com] Open Redirect'

24 Oct 2016

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'CRLF Injection [ishop.qiwi.com]'

24 Oct 2016

b'Vimeo' disclosed a bug submitted by b'bobrov' 
b'[vimeopro.com] CRLF Injection'

24 Oct 2016

b'Boozt Fashion AB' disclosed a bug submitted by b'zephrfish' 
b'Potential Subdomain Takeover Possible'

22 Oct 2016

b'Twitter' disclosed a bug submitted by b'punkrock' 
b'Full Path Disclosure at 27.prd.vine.co'

21 Oct 2016

b'Yelp' disclosed a bug submitted by b'youssefmahmoud' 
b'Bybass The Closing of the account and logged again to your account'

21 Oct 2016

b'Uber' disclosed a bug submitted by b'rubyroobs' 
b'Users can falsely declare their own Uber account info on the monthly billing application'

20 Oct 2016

b'Mindoktor' disclosed a bug submitted by b'aiacobelli' 
b'Vulnerable Mobile Phone configuration'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'ak1t4' 
b'Reflected XSS at m.olx.ph'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'mefkan' 
b'XSS and HTML Injection https://sharjah.dubizzle.com/'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'mefkan' 
b'XSS and Open Redirect on https://jobs.dubizzle.com/'

20 Oct 2016

b'OLX' disclosed a bug submitted by b'url' 
b'Name, email, phone and more disclosure on user ID (API)'

20 Oct 2016

1 ... 635 636 637 638 639 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM