Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'ke_' 
b'CSRF in Connecting Pinterest Account'

02 Feb 2016

b'ownCloud' disclosed a bug submitted by b'ashesh' 
b'test1.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability'

01 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'paresh_parmar' 
b'XSS at forum : '

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'wesecureapp' 
b'Twitter Disconnect CSRF'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'wesecureapp' 
b'Attach Pinterest account - no State/CSRF parameter in Oauth Call back'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'reactors08' 
b'www.shopify.com XSS via third-party script'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'heracles' 
b'Full access to Amazon S3 bucket containing AWS CloudTrail logs'

01 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[afisha.mail.ru] SQL Injection'

01 Feb 2016

b'ownCloud' disclosed a bug submitted by b'ashesh' 
b's2.owncloud.com: SSL Session cookie without secure flag set'

27 Jan 2016

b'ownCloud' disclosed a bug submitted by b'd0znpp' 
b'XXE at host vpn.owncloud.com'

27 Jan 2016

b'HackerOne' disclosed a bug submitted by b'00day' 
b'Team Member(s) associated with a Group have Read-only permission (Post internal comments) can post comment to all the participants '

27 Jan 2016

b'Mail.Ru' disclosed a bug submitted by b'harry_mg' 
b'Multiple vulnerabilities in mail.ru subdomains'

27 Jan 2016

b'HackerOne' disclosed a bug submitted by b'intidc' 
b'HTML injection can lead to data theft'

26 Jan 2016

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b'IDOR- Activate Mopub on different organizations- steal api token- Fabric.io'

25 Jan 2016

b'Square Open Source' disclosed a bug submitted by b'bburky' 
b'git-fastclone allows arbitrary command execution through usage of ext remote URLs in submodules'

25 Jan 2016

b'Square Open Source' disclosed a bug submitted by b'bburky' 
b'Unsafe usage of Ruby string interpolation enabling command injection in git-fastclone'

25 Jan 2016

b'ownCloud' disclosed a bug submitted by b'haiderkamal' 
b'owncloud.help: Text Injection'

23 Jan 2016

b'Imgur' disclosed a bug submitted by b'charfee' 
b'XSS m.imgur.com'

21 Jan 2016

b'withinsecurity' disclosed a bug submitted by b'prashanth' 
b'content injection'

21 Jan 2016

b'Imgur' disclosed a bug submitted by b'charfee' 
b'XSS in imgur mobile 3'

21 Jan 2016

1 ... 651 652 653 654 655 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM