Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Algolia' disclosed a bug submitted by b'corb3nik' 
b'Hyperlink Injection in Friend Invitation Emails'

07 Oct 2016

b'Yelp' disclosed a bug submitted by b'nahamsec' 
b'Access to internal CMS containing private Data'

07 Oct 2016

b'Shopify' disclosed a bug submitted by b'pouya' 
b'Add signature to transactions without any permission'

07 Oct 2016

b'Ian Dunn' disclosed a bug submitted by b'hehsan979' 
b'Google Authenticator0.6 - PHP Version Dosclosure'

06 Oct 2016

b'Ian Dunn' disclosed a bug submitted by b'hehsan979' 
b'All Plugins - Direct file access to plugin files Vulnerability'

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[realty.mail.ru] XSS, SSI Injection'

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[touch.lady.mail.ru] CRLF Injection '

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[support.my.com] Internet Explorer XSS'

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[tanks.mail.ru] Internet Explorer XSS via Request-URI'

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[mrgs.mail.ru] Internet Explorer XSS via Request-URI'

06 Oct 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[corp.mail.ru] CRLF Injection / Insecure nginx configuration'

06 Oct 2016

b'Dropbox' disclosed a bug submitted by b'hussein98d' 
b'XSS in OAuth Redirect Url'

06 Oct 2016

b'Bime' disclosed a bug submitted by b'sameoldstory' 
b'Subdomain takeover at ws.bimedb.com due to unclaimed Amazon S3 bucket'

05 Oct 2016

b'Shopify' disclosed a bug submitted by b'ysx' 
b'Deleted Post and Administrative Function Access in eCommerce Forum'

05 Oct 2016

b'Legal Robot' disclosed a bug submitted by b'eterm' 
b'unsecured legalrobot.co.uk assets'

05 Oct 2016

b'Snapchat' disclosed a bug submitted by b'jreynolds' 
b'Subdomain takeover of blog.snapchat.com'

05 Oct 2016

b'Legal Robot' disclosed a bug submitted by b'burpman07' 
b'CORS (Cross-Origin Resource Sharing)'

05 Oct 2016

b'Certly' disclosed a bug submitted by b'abc12345' 
b'Non secure requests at guard.certly.io not upgrading to https'

05 Oct 2016

b'OLX' disclosed a bug submitted by b'cablej' 
b'CSRF in account configuration leads to complete account compromise'

05 Oct 2016

b'Nextcloud' disclosed a bug submitted by b'drosera' 
b'Slow Http attack on nextcloud(DOS)'

05 Oct 2016

1 ... 643 644 645 646 647 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM