Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Gratipay' disclosed a bug submitted by b'dotnick' 
b"don't leak server version of grtp.co in error pages"

14 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'lukasreschke' 
b'Content-type sniffing leads to stored XSS in CMS Airship on Internet Explorer '

14 Jul 2016

b'Slack' disclosed a bug submitted by b'thisishrsh' 
b'File upload over private IM channel'

13 Jul 2016

b'LocalTapiola' disclosed a bug submitted by b'mlitchfield' 
b'Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage'

13 Jul 2016

b'Uber' disclosed a bug submitted by b'jutsuce' 
b'Directory Browsing and Open Git Repository on Uber Development Box '

13 Jul 2016

b'OLX' disclosed a bug submitted by b'thezawad' 
b'XSS @ yaman.olx.ph'

13 Jul 2016

b'OLX' disclosed a bug submitted by b'thezawad' 
b'XSS @ *.olx.com.ar'

13 Jul 2016

b'Gratipay' disclosed a bug submitted by b'thezawad' 
b'prevent null bytes in email field'

13 Jul 2016

b'Gratipay' disclosed a bug submitted by b'jsshen' 
b"don't serve hidden files from Nginx"

13 Jul 2016

b'New Relic' disclosed a bug submitted by b'daniyal_nasir' 
b'No CSRF validation on Account Monitors in Synthetics Block'

12 Jul 2016

b'New Relic' disclosed a bug submitted by b'sarwarjahan' 
b'Normal user can set "Job title" of other users by Direct Object Reference'

12 Jul 2016

b'Uber' disclosed a bug submitted by b'maluko' 
b'Information regarding trips from other users'

12 Jul 2016

b'HackerOne' disclosed a bug submitted by b'gone' 
b'Possible CSRF during joining report as participant '

12 Jul 2016

b'Keybase' disclosed a bug submitted by b'franjkovic' 
b'Register multiple users using one invitation (race condition)'

11 Jul 2016

b'Twitter' disclosed a bug submitted by b'adeelimtiaz90' 
b'XSS via Fabrico Account Name'

11 Jul 2016

b'Twitter' disclosed a bug submitted by b'paulos_' 
b'[Critical] - Steal OAuth Tokens'

11 Jul 2016

b'Gratipay' disclosed a bug submitted by b'japongskie' 
b'Information disclosure'

11 Jul 2016

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[connect.mail.ru] Memory Disclosure / IE XSS'

11 Jul 2016

b'Automattic' disclosed a bug submitted by b'cure53' 
b'WordPress Flash XSS in *flashmediaelement.swf*'

10 Jul 2016

b'Automattic' disclosed a bug submitted by b'cure53' 
b'WordPress SOME bug in plupload.flash.swf leading to RCE'

10 Jul 2016

1 ... 661 662 663 664 665 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM