Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OpenSSL' disclosed a bug submitted by b'nimia' 
b"SSLv2 doesn't block disabled ciphers (CVE-2015-3197)"

21 Sep 2016

b'OpenSSL' disclosed a bug submitted by b'nimia' 
b'Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)'

21 Sep 2016

b'Instacart' disclosed a bug submitted by b'gorkhali' 
b'[Critical] Subdomain Takeover'

20 Sep 2016

b'LocalTapiola' disclosed a bug submitted by b'nyymi' 
b'Remote Code Execution in NovaStor NovaBACKUP DataCenter backup software (Hiback)'

20 Sep 2016

b'HackerOne' disclosed a bug submitted by b'geekboy' 
b'Hacker.One Subdomain Takeover'

20 Sep 2016

b'Pornhub' disclosed a bug submitted by b'cyber-guard' 
b'Unsecured Grafana instance'

20 Sep 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'CVE-2016-2177 Undefined pointer arithmetic in SSL code'

20 Sep 2016

b'Python' disclosed a bug submitted by b'johnleitch' 
b'msilib.OpenDatabase Type Confusion'

20 Sep 2016

b'Python' disclosed a bug submitted by b'nedw' 
b'Type confusion in partial.setstate, partial_repr, partial_call leads to memory corruption, reliable control flow hijack'

20 Sep 2016

b'New Relic' disclosed a bug submitted by b'pewpew' 
b'Login Open Redirect'

19 Sep 2016

b'Instacart' disclosed a bug submitted by b'cablej' 
b'Brute force login and bypass locked account restrictions via iOS app'

19 Sep 2016

b'Shopify' disclosed a bug submitted by b'nismo' 
b'XSS in SHOPIFY: Unsanitized Supplier Name can lead to XSS in Transfers Timeline'

19 Sep 2016

b'Shopify' disclosed a bug submitted by b'nismo' 
b'Unsanitized Location Name in POS Channel can lead to XSS in Orders Timeline'

19 Sep 2016

b'Shopify' disclosed a bug submitted by b'ysx' 
b'Access to Splunk via shard3-db2.ec2.shopify.com endpoint'

19 Sep 2016

b'OLX' disclosed a bug submitted by b'surajsp' 
b'full path disclosure vulnerability at https://security.olx.com/*'

19 Sep 2016

b'Boozt Fashion AB' disclosed a bug submitted by b'0x00iam_hack3r' 
b'Http header injection'

19 Sep 2016

b'Legal Robot' disclosed a bug submitted by b'paramdham' 
b'No valid SPF record'

19 Sep 2016

b'Legal Robot' disclosed a bug submitted by b'paramdham' 
b' Rate limiting on Email confirmation link'

19 Sep 2016

b'Uber' disclosed a bug submitted by b'dups' 
b'Attacker could setup reminder remotely using brute force'

19 Sep 2016

b'Boozt Fashion AB' disclosed a bug submitted by b'yassineaboukir' 
b'Host header poisoning leads to account password reset links hijacking'

17 Sep 2016

1 ... 649 650 651 652 653 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM