Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Dropbox' disclosed a bug submitted by b'shield' 
b'No Rate Limiting while sending the feedback under Dropbox Help Centre'

13 Apr 2016

b'Adobe' disclosed a bug submitted by b'skansing' 
b'Reflected XSS via. search'

13 Apr 2016

b'Udemy' disclosed a bug submitted by b'yog3ndra' 
b'Session Takeover vulnerability '

13 Apr 2016

b'Xero' disclosed a bug submitted by b'er_pratik_panchal_infobit' 
b'Vulnerability : XSS Vulnerability '

13 Apr 2016

b'Badoo' disclosed a bug submitted by b'ngocdh' 
b'Password modification without knowing actual password & httpOnly bypass'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'kenan' 
b'Insecure Direct Object Reference on badoo.com'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'zombiehelp54' 
b'[CRITICAL] Full account takeover using CSRF'

12 Apr 2016

b'OpenSSL' disclosed a bug submitted by b'hanno' 
b'BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)'

12 Apr 2016

b'ownCloud' disclosed a bug submitted by b'kalihat007' 
b'Cross site scripting in apps.owncloud.com'

12 Apr 2016

b'APITest.IO' disclosed a bug submitted by b'uyga' 
b'beta version reveals paths, environment variables and partially files contents'

12 Apr 2016

b'Dropbox' disclosed a bug submitted by b'super_hack' 
b'Possible SQL injection can cause denial of service attack'

10 Apr 2016

b'Shopify' disclosed a bug submitted by b'virtualhunter' 
b'XSS on hardware.shopify.com'

09 Apr 2016

b'ownCloud' disclosed a bug submitted by b'nehalh13' 
b'X-XSS-Protection not enabled'

09 Apr 2016

b'Trello' disclosed a bug submitted by b'theflofly' 
b'Payments informations are sent to the webhook when a team changes its visibility'

07 Apr 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'93c08539' 
b'Other Buffer Overflow in PHP of the AirMax Products'

07 Apr 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'93c08539' 
b'Yet another Buffer Overflow in PHP of the AirMax Products'

07 Apr 2016

b'Zomato' disclosed a bug submitted by b'pr0tagon1st' 
b'Persistent input validation mail encoding vulnerability in the "just followed you" email notification.'

07 Apr 2016

b'Mail.Ru' disclosed a bug submitted by b'seifelsallamy' 
b'VERY DANGEROUS XSS STORED inside emails '

07 Apr 2016

b'New Relic' disclosed a bug submitted by b'xenonstory' 
b'Old CAPTCHA offers no protection'

07 Apr 2016

b'Gratipay' disclosed a bug submitted by b'shahzaib-shani' 
b'prevent content spoofing on /search'

06 Apr 2016

1 ... 661 662 663 664 665 ... 747

BY DENIS WERNER - @NOBBD - IMPRESSUM