Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'arbaz_hussain' 
b'CSRF AT SUBSCRIBE TO LIST '

05 May 2016

b'ok.ru' disclosed a bug submitted by b'zoczus' 
b'Same-Origin Policy bypass on main domain - ok.ru'

04 May 2016

b'ok.ru' disclosed a bug submitted by b'zoczus' 
b'Same-Origin Policy Bypass #2 '

04 May 2016

b'Imgur' disclosed a bug submitted by b'kasser' 
b'Attack User Privacy Settings - X-Frame-Options missing on m.imgur.com/user/username/settings'

04 May 2016

b'Veris' disclosed a bug submitted by b'bugs3ra' 
b'Server and PHP version Disclosed in Response Header'

04 May 2016

b'Veris' disclosed a bug submitted by b'bugs3ra' 
b'Stored XSS in Access Rules'

04 May 2016

b'Shopify' disclosed a bug submitted by b'abdellahyal' 
b'staff memeber can install apps even if have limitied access '

04 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Persistent XSS on public project page'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Labels created in private projects are leaked'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Attacker can delete (and read) private project webhooks'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Attacker can post notes on private MR, snippets, and issues'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Confidential issues leaked in public projects when attached to milestone'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Private snippets in public / internal projects leaked though GitLab API'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'geeknik' 
b'ASN.1 BIO excessive memory allocation (CVE-2016-2109)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'Potential double free in EVP_DigestInit_ex'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EVP_EncodeUpdate overflow (CVE-2016-2105)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EVP_EncryptUpdate overflow (CVE-2016-2106)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EBCDIC overread (CVE-2016-2176)'

03 May 2016

b'The Internet' disclosed a bug submitted by b'stewie' 
b'Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714)'

03 May 2016

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Spamming any user from Reset Password Function'

03 May 2016

1 ... 662 663 664 665 666 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM