Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Python' disclosed a bug submitted by b'guido' 
b'urllib HTTP header injection CVE-2016-5699'

01 Sep 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'shubham' 
b'Open Redirect in unifi.ubnt.com [Controller Finder]'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Open redirect using checkout_url'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'fransrosen' 
b'Open CouchDB on experiments.ec2.shopify.com:5984'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'lewerkun' 
b'Access to Splunk at https://apt.ec2.shopify.com:8089'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'(BYPASS) Open Redirect after login at http://ecommerce.shopify.com'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b"(FULL PATH DISCLOSURE) Unknown MySQL server host 'shardm-reader.chi2.shopify.io' "

01 Sep 2016

b'OLX' disclosed a bug submitted by b'exception' 
b'[Critical] Delete any account '

01 Sep 2016

b'Gratipay' disclosed a bug submitted by b'exception' 
b'XSS Via Method injection'

01 Sep 2016

b'Algolia' disclosed a bug submitted by b'xenon' 
b'[github.algolia.com] XSS'

01 Sep 2016

b'Automattic' disclosed a bug submitted by b'psych0tr1a' 
b'[bbPress] Stored XSS in any forum post.'

01 Sep 2016

b'HackerOne' disclosed a bug submitted by b'kirils' 
b'Disclosure of external users invited to a specific report'

01 Sep 2016

b'Shopify' disclosed a bug submitted by b'apara' 
b'View all deleted comments and rating of any app .'

01 Sep 2016

b'Slack' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs'

01 Sep 2016

b'ownCloud' disclosed a bug submitted by b'himanshu_mehta' 
b'ownCloud 2.2.2.6192 DLL Hijacking Vulnerability'

31 Aug 2016

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'Open Redirect possible in https://www.shopify.com/admin/'

31 Aug 2016

b'LocalTapiola' disclosed a bug submitted by b'rojanr' 
b'DOM XSS bypassing in Regional Office -selector'

31 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'sivakumar88' 
b'Reflected Self-XSS Vulnerability in the Comment section of Files (Different-payloads)'

31 Aug 2016

b'Legal Robot' disclosed a bug submitted by b'punkit' 
b' Legal | Application is Missing CSP(Content Security Policy) Header '

31 Aug 2016

b'drchrono' disclosed a bug submitted by b'7seciq' 
b'Request Accepts without X-CSRFToken [ Header - Cookie ]'

31 Aug 2016

1 ... 652 653 654 655 656 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM