Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OLX' disclosed a bug submitted by b'palashjhabak' 
b'Unauthorised access to olx.in user accounts. '

17 Aug 2016

b'HackerOne' disclosed a bug submitted by b'saeedhashem' 
b"Ability to monitor reports' submission in real time"

17 Aug 2016

b'Nextcloud' disclosed a bug submitted by b'fransrosen' 
b'Response Header injection using redirect_uri together with PHP that utilizes Header Folding according to RFC1945 and Internet Explorer 11'

17 Aug 2016

b'OLX' disclosed a bug submitted by b'niemand' 
b'SQLi in Payment Request'

16 Aug 2016

b'Pornhub' disclosed a bug submitted by b'agarri_fr' 
b'libav (used during conversion of uploaded videos) is vulnerable to SSRF attacks'

15 Aug 2016

b'Uber' disclosed a bug submitted by b'severus' 
b'[IODR] Get business trip via organization id'

15 Aug 2016

b'Uber' disclosed a bug submitted by b'issam_rabhi' 
b'Missing authorization checks leading to the exposure of ubernihao.com administrator accounts '

15 Aug 2016

b'Uber' disclosed a bug submitted by b'parth' 
b'[CRITICAL] -- Complete Account Takeover'

15 Aug 2016

b'Slack' disclosed a bug submitted by b'd0znpp' 
b"Source code leakage through GIT web access at host '52.91.137.42'"

15 Aug 2016

b'Dovecot' disclosed a bug submitted by b'koolacac' 
b'Outdated Apache Server in www.dovecot.fi is vulnerable to various attack.'

15 Aug 2016

b'OLX' disclosed a bug submitted by b'thezawad' 
b'Manipulating joinolx.com Job Vacancy alert subscription emails (HTML Injection / Script Injection)'

15 Aug 2016

b'Gratipay' disclosed a bug submitted by b'kuskumar' 
b'csrf_token cookie don\'t have the flag "HttpOnly"'

14 Aug 2016

b'Zomato' disclosed a bug submitted by b'spam404' 
b'XSS on zomato.com'

14 Aug 2016

b'Gratipay' disclosed a bug submitted by b'mmyamin' 
b'bring grtp.co up to A grade on SSLLabs'

13 Aug 2016

b'Instacart' disclosed a bug submitted by b'introvertmac' 
b'CSRF with redeem coupon request '

13 Aug 2016

b'Veris' disclosed a bug submitted by b'ak1t4' 
b'Internal server error 500 at log.veris.in '

13 Aug 2016

b'New Relic' disclosed a bug submitted by b'praseudo' 
b'Login CSRF vulnerability'

12 Aug 2016

b'New Relic' disclosed a bug submitted by b'rahul_ch' 
b'All Active user sessions should be destroyed when user change his password!'

12 Aug 2016

b'concrete5' disclosed a bug submitted by b'khalidamin511' 
b'CSRF Full Account Takeover'

12 Aug 2016

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'Bypassing callback_url validation on Digits'

12 Aug 2016

1 ... 657 658 659 660 661 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM