REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Paragon Initiative Enterprises'
disclosed a bug submitted by
b'hackerone_hero'
b'DMARC Not found for paragonie.com URGENT'
03 Nov 2016
b'Paragon Initiative Enterprises'
disclosed a bug submitted by
b'sstok'
b'Not clearing hex-decoded variable after usage in Authentication'
03 Nov 2016
b'GitLab'
disclosed a bug submitted by
b'jobert'
b'Read files on application server, leads to RCE'
03 Nov 2016
b'OLX'
disclosed a bug submitted by
b'yashmaurya'
b'Reflected XSS in OLX.in'
02 Nov 2016
b'Informatica'
disclosed a bug submitted by
b'zephrfish'
b'[oneclickdrsfdc-test.informatica.com] Tomcat Example Scripts Exposed Unauthenticated'
02 Nov 2016
b'Nextcloud'
disclosed a bug submitted by
b'elamaran619'
b'[Thirdparty]\xc2\xa0Stored XSS in chat module - nextcloud server 9.0.51 installed in ubuntu 14.0.4 LTS'
02 Nov 2016
b'ownCloud'
disclosed a bug submitted by
b'bobrov'
b'[api.owncloud.org] CRLF Injection'
02 Nov 2016
b'ownCloud'
disclosed a bug submitted by
b'bobrov'
b'[doc.owncloud.org] CRLF Injection'
02 Nov 2016
b'leetfiles'
disclosed a bug submitted by
b'bobrov'
b'[leetfil.es] MSIE, Edge XSS via Request-URI'
02 Nov 2016
b'Dropbox'
disclosed a bug submitted by
b'bobrov'
b'[monitor.sjc.dropbox.com] CRLF Injection'
02 Nov 2016
b'Greenhouse.io'
disclosed a bug submitted by
b'bobrov'
b'[greenhouse.io] CRLF Injection / Insecure nginx configuration'
02 Nov 2016
b'Mail.Ru'
disclosed a bug submitted by
b'murthysagi'
b'Mail.ru for Android Content Provider Vulnerability'
02 Nov 2016
b'Harvest'
disclosed a bug submitted by
b'vagg-a-bond'
b'Project Disclosure of all Harvest Instances'
01 Nov 2016
b'Slack'
disclosed a bug submitted by
b'procode701'
b'Email information leakage for certain addresses'
31 Oct 2016
b'Boozt Fashion AB'
disclosed a bug submitted by
b'inhibitor181'
b"Make victim buy in attacker's account without any idea - http://www.booztlet.com/"
31 Oct 2016
b'Paragon Initiative Enterprises'
disclosed a bug submitted by
b'hextitan'
b'[Airship CMS] Local File Inclusion - RST Parser'
31 Oct 2016
b'Nextcloud'
disclosed a bug submitted by
b'ahsantahir'
b'Content spoofing due to the improper behavior of the 403 page in Private Server'
31 Oct 2016
b'Harvest'
disclosed a bug submitted by
b'eboda'
b'Invoices can be added to any retainers - even closs-platform'
29 Oct 2016
b'Zaption'
disclosed a bug submitted by
b'bobrov'
b'[zaption.com] Open Redirect'
29 Oct 2016
b'C2FO'
disclosed a bug submitted by
b'bobrov'
b'[admin.c2fo.com] Open Redirect'
29 Oct 2016
1
...
638
639
640
641
642
...
774
BY DENIS WERNER - @NOBBD -
IMPRESSUM