Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Legal Robot' disclosed a bug submitted by b'japzdivino' 
b'Bypass 8 chars password complexity with 6 chars only due to insecure password reset functionaliy'

29 Oct 2016

b'HackerOne' disclosed a bug submitted by b'staytuned' 
b'Information disclosure via policy update notifications after removal from program'

29 Oct 2016

b'Whisper' disclosed a bug submitted by b'shhnjk' 
b'Missing DMARC record'

28 Oct 2016

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Disclosure of private photos/albums - http://www.pornhub.com/album/show_image_box'

28 Oct 2016

b'GitLab' disclosed a bug submitted by b'yaworsk' 
b'Insecure 2FA/authentication implementation creates a brute force vulnerability'

28 Oct 2016

b'Automattic' disclosed a bug submitted by b'bobrov' 
b'Follow Button XSS'

28 Oct 2016

b'OLX' disclosed a bug submitted by b'hogarth45' 
b'Reflective XSS at m.olx.ph'

28 Oct 2016

b'Yelp' disclosed a bug submitted by b'vinesh1989' 
b'Requesting Show CheckIn Alert for Non Friend User'

27 Oct 2016

b'Yelp' disclosed a bug submitted by b'badagent' 
b'Verification of E-Mail address possible on https://biz.yelp.com/login and https://biz.yelp.com/forgot'

27 Oct 2016

b'Open-Xchange' disclosed a bug submitted by b'dejavuln' 
b'OX (Guard): Stored Cross-Site Scripting via Incoming Email'

27 Oct 2016

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'(HackerOne SSO-SAML) Login CSRF, Open Redirect, and Self-XSS Possible Exploitation'

27 Oct 2016

b'Zopim' disclosed a bug submitted by b'bobrov' 
b'[status.zopim.com] Open Redirect'

26 Oct 2016

b'Zopim' disclosed a bug submitted by b'punkrock' 
b'Full Sub Domain Takeover at wx.zopim.net'

26 Oct 2016

b'OLX' disclosed a bug submitted by b'juliocesar' 
b'Full path disclosure vulnerability at http://corporate.olx.ph'

26 Oct 2016

b'CloudFlare' disclosed a bug submitted by b'albinowax' 
b'Reflected XSS on partners.cloudflare.com'

26 Oct 2016

b'Brave Software' disclosed a bug submitted by b'sahiltikoo' 
b'Denial of service attack(window object) on brave browser'

25 Oct 2016

b'Brave Software' disclosed a bug submitted by b'ibram' 
b'[ios] Address bar spoofing in Brave for iOS'

25 Oct 2016

b'Pornhub' disclosed a bug submitted by b'mikkz' 
b'Private Photo Disclosure - /user/stream_photo_attach?load=album&id= endpoint'

25 Oct 2016

b'Harvest' disclosed a bug submitted by b'pradeepch99' 
b'CSRF token fixation in Sign in with Google'

25 Oct 2016

b'Sucuri' disclosed a bug submitted by b'bobrov' 
b'[support.sucuri.net] CRLF Injection'

24 Oct 2016

1 ... 639 640 641 642 643 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM