Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Estimation of a Lower Bound on Number of Uber Drivers via Enumeration'

24 Aug 2016

b'Uber' disclosed a bug submitted by b'vivek-p' 
b'Wordpress Vulnerabilities in transparencyreport.uber.com and eng.uber.com domains'

24 Aug 2016

b'Uber' disclosed a bug submitted by b'syndr0me' 
b'Multiple vulnerabilities in a WordPress plugin at drive.uber.com'

23 Aug 2016

b'Gratipay' disclosed a bug submitted by b'trabajoduro' 
b'auto-logout after 20 minutes'

23 Aug 2016

b'Gratipay' disclosed a bug submitted by b'muhaddimu' 
b'Cross Site Scripting In Profile Statement '

23 Aug 2016

b'Uber' disclosed a bug submitted by b'jamesclyde' 
b"newsroom.uber.com is vulnerable to 'SOME' XSS attack via plupload.flash.swf"

22 Aug 2016

b'Coinbase' disclosed a bug submitted by b'cablej' 
b'window.opener is leaking to external domains upon redirect on Safari'

22 Aug 2016

b'Snapchat' disclosed a bug submitted by b'ebrietas' 
b'Subdomain takeover on http://fastly.sc-cdn.net/'

22 Aug 2016

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'Add tweet to collection CSRF '

22 Aug 2016

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'Urgent : Disclosure of all the apps with hash ID in mopub through API request (Authentication bypass) '

22 Aug 2016

b'GitLab' disclosed a bug submitted by b'plazmaz' 
b'XSS On meta tags in profile page'

21 Aug 2016

b'Gratipay' disclosed a bug submitted by b'a5tronaut' 
b'fix bug in username restriction'

20 Aug 2016

b'Uber' disclosed a bug submitted by b'raghav_bisht' 
b'XSS At "pages.et.uber.com"'

19 Aug 2016

b'HackerOne' disclosed a bug submitted by b'heracles' 
b'Non-secure requests are not automatically upgraded to HTTPS'

19 Aug 2016

b'concrete5' disclosed a bug submitted by b'paulos_' 
b'Local File Inclusion path bypass'

19 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'Multiple XSS in Camptix Event Ticketing Plugin'

18 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'thezawad' 
b'CSV Injection at Camptix Event Ticketing'

18 Aug 2016

b'HackerOne' disclosed a bug submitted by b'faisalahmed' 
b'Information leakage of private program'

18 Aug 2016

b'GoCD' disclosed a bug submitted by b'mr__robot' 
b'X-Content-Type-Options header missing at Auth Login'

18 Aug 2016

b'Coursera' disclosed a bug submitted by b'muhammadkhizerjaved' 
b'Broken authentication and session management flaw '

18 Aug 2016

1 ... 651 652 653 654 655 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM