Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Bime' disclosed a bug submitted by b'sameoldstory' 
b'Subdomain takeover at ws.bimedb.com due to unclaimed Amazon S3 bucket'

05 Oct 2016

b'Shopify' disclosed a bug submitted by b'ysx' 
b'Deleted Post and Administrative Function Access in eCommerce Forum'

05 Oct 2016

b'Legal Robot' disclosed a bug submitted by b'eterm' 
b'unsecured legalrobot.co.uk assets'

05 Oct 2016

b'Snapchat' disclosed a bug submitted by b'jreynolds' 
b'Subdomain takeover of blog.snapchat.com'

05 Oct 2016

b'Legal Robot' disclosed a bug submitted by b'burpman07' 
b'CORS (Cross-Origin Resource Sharing)'

05 Oct 2016

b'Certly' disclosed a bug submitted by b'abc12345' 
b'Non secure requests at guard.certly.io not upgrading to https'

05 Oct 2016

b'OLX' disclosed a bug submitted by b'cablej' 
b'CSRF in account configuration leads to complete account compromise'

05 Oct 2016

b'Nextcloud' disclosed a bug submitted by b'drosera' 
b'Slow Http attack on nextcloud(DOS)'

05 Oct 2016

b'Nextcloud' disclosed a bug submitted by b'bastianwelfrid' 
b'Arbitrary File Upload in Logo & Log in image Theming setting.'

05 Oct 2016

b'Trello' disclosed a bug submitted by b'theflofly' 
b'File access using image tragick'

05 Oct 2016

b'WebSummit' disclosed a bug submitted by b'rubyroobs' 
b'Reflected xss on websummit.net'

04 Oct 2016

b'ok.ru' disclosed a bug submitted by b'hamooda_anonphantom' 
b'Xss in m.ok.ru'

04 Oct 2016

b'Harvest' disclosed a bug submitted by b'eboda' 
b'Leak of all project names and all user names , even across applications'

04 Oct 2016

b'RubyGems' disclosed a bug submitted by b'c0rte' 
b'Password Reset emails missing TLS leads account takeover'

04 Oct 2016

b'Pornhub' disclosed a bug submitted by b'5haked' 
b'[RCE] Unserialize to XXE - file disclosure on ams.upload.pornhub.com'

03 Oct 2016

b'Pornhub' disclosed a bug submitted by b'clubjk' 
b'XSS ReflectedGET /*embed_player*?'

03 Oct 2016

b'Pornhub' disclosed a bug submitted by b'clubjk' 
b'XSS Reflected incategories*p'

03 Oct 2016

b'HackerOne' disclosed a bug submitted by b'rbcafe' 
b'Obtain the username & the uid of the one doing the S3 sync on Hackerone'

03 Oct 2016

b'Pornhub' disclosed a bug submitted by b'jouko' 
b'SSRF & XSS (W3 Total Cache)'

03 Oct 2016

b'Romit' disclosed a bug submitted by b'gone' 
b'[CRITICAL]-Taking over entire subdomain of romit.io'

03 Oct 2016

1 ... 639 640 641 642 643 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM