Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Moneybird' disclosed a bug submitted by b'japongskie' 
b'Logging out any user'

26 Aug 2016

b'Moneybird' disclosed a bug submitted by b'a5tronaut' 
b'Content Spoofing In Moneybird'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'spodermen' 
b'Content Injection - apps.nextcloud.com'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'ahsantahir' 
b'Information Disclosure of .htaccess file in Private Server/Subdomain'

26 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'behroz_' 
b'Wordpress: Directory Traversal / Denial of Serivce'

26 Aug 2016

b'Vimeo' disclosed a bug submitted by b'vijay_kumar1110' 
b'Invite any user to your group without even following him'

25 Aug 2016

b'MapLogin' disclosed a bug submitted by b'vijay_kumar1110' 
b'Bypass verification of email while creating account(No rate limiting enable for verification code)'

25 Aug 2016

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'File Upload XSS in image uploading of App in mopub'

25 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'goethe_' 
b'Expired SSL certificate '

25 Aug 2016

b'Phabricator' disclosed a bug submitted by b'm4drob0t' 
b'Error page Text Injection.'

25 Aug 2016

b'Ian Dunn' disclosed a bug submitted by b'ahsantahir' 
b'[Not just a server configuration issue] Full Path Disclosure '

24 Aug 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'muhaddimu' 
b"Email Spoofing With Your Website's Email"

24 Aug 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'Estimation of a Lower Bound on Number of Uber Drivers via Enumeration'

24 Aug 2016

b'Uber' disclosed a bug submitted by b'vivek-p' 
b'Wordpress Vulnerabilities in transparencyreport.uber.com and eng.uber.com domains'

24 Aug 2016

b'Uber' disclosed a bug submitted by b'syndr0me' 
b'Multiple vulnerabilities in a WordPress plugin at drive.uber.com'

23 Aug 2016

b'Gratipay' disclosed a bug submitted by b'trabajoduro' 
b'auto-logout after 20 minutes'

23 Aug 2016

b'Gratipay' disclosed a bug submitted by b'muhaddimu' 
b'Cross Site Scripting In Profile Statement '

23 Aug 2016

b'Uber' disclosed a bug submitted by b'jamesclyde' 
b"newsroom.uber.com is vulnerable to 'SOME' XSS attack via plupload.flash.swf"

22 Aug 2016

b'Coinbase' disclosed a bug submitted by b'cablej' 
b'window.opener is leaking to external domains upon redirect on Safari'

22 Aug 2016

b'Snapchat' disclosed a bug submitted by b'ebrietas' 
b'Subdomain takeover on http://fastly.sc-cdn.net/'

22 Aug 2016

1 ... 655 656 657 658 659 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM