Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Keybase' disclosed a bug submitted by b'franjkovic' 
b'Race conditions can be used to bypass invitation limit'

10 Aug 2016

b'Trello' disclosed a bug submitted by b'mefkan' 
b'Sending Unlimited Mails To Anybody With Easy Social Share Buttons Plugin'

10 Aug 2016

b'Trello' disclosed a bug submitted by b'mefkan' 
b'XSS and Open-Redirect via SVG '

10 Aug 2016

b'Trello' disclosed a bug submitted by b'rajauzairabdullah' 
b'Verification Code Reused For activating 2FA'

10 Aug 2016

b'Maximum' disclosed a bug submitted by b'linkks' 
b'Blind SQL Injection'

10 Aug 2016

b'Coinbase' disclosed a bug submitted by b'rajauzairabdullah' 
b'Create Multiple Account Using Similar X-CSRF token'

09 Aug 2016

b'HackerOne' disclosed a bug submitted by b'xsserboiii' 
b'Reward Money Leakage'

09 Aug 2016

b'SecNews' disclosed a bug submitted by b'malcolmx' 
b'Content spoofing due to the improper behavior of the not-found message '

09 Aug 2016

b'SecNews' disclosed a bug submitted by b'sameoldstory' 
b'Querying private posts and changing post meta'

09 Aug 2016

b'Shopify' disclosed a bug submitted by b'vijay_kumar1110' 
b'Delete/modify your own comment after limited access(IDOR)'

09 Aug 2016

b'Shopify' disclosed a bug submitted by b'vijay_kumar1110' 
b'Staff member can delete Private Apps'

09 Aug 2016

b'SecNews' disclosed a bug submitted by b'marine' 
b'Text injection on error page.'

09 Aug 2016

b'Shopify' disclosed a bug submitted by b'mico02' 
b'Unauthorized access to Zookeeper on http://locutus-zk3.ec2.shopify.com:2181'

08 Aug 2016

b'Gratipay' disclosed a bug submitted by b'akanshaminti' 
b'Cookie:HttpOnly Flag not set'

08 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'ctee' 
b'Bookmarks: Delete all existing bookmarks of a user'

08 Aug 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[opensource.mail.ru] system accounts enumeration'

08 Aug 2016

b'ExpressionEngine' disclosed a bug submitted by b'strukt' 
b'Filename and directory enumeration'

08 Aug 2016

b'Uber' disclosed a bug submitted by b'raghav_bisht' 
b'Blind OOB XXE At "http://ubermovement.com/"'

08 Aug 2016

b'Gratipay' disclosed a bug submitted by b'footstep' 
b'Host Header Injection/Redirection Attack'

07 Aug 2016

b'Gratipay' disclosed a bug submitted by b'ahsantahir' 
b'Content Spoofing/Text Injection '

07 Aug 2016

1 ... 654 655 656 657 658 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM