Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'jedimaster' 
b'Cross Site Scripting - type Patameter'

06 Mar 2016

b'Zomato' disclosed a bug submitted by b'missoum1307' 
b'Remote File Upload Vulnerability in business-blog.zomato.com'

06 Mar 2016

b'Automattic' disclosed a bug submitted by b'skansing' 
b'Internal GET SSRF via CSRF with Press This scan feature'

04 Mar 2016

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b'Tweet Deck XSS- Persistent- Group DM name'

04 Mar 2016

b'Coinbase' disclosed a bug submitted by b'josephjose96' 
b'Misconfiguration in 2 factor allows sensitive data expose'

04 Mar 2016

b'Imgur' disclosed a bug submitted by b'benmassaoud' 
b'risk of having secure=false in a crossdomain.xml'

03 Mar 2016

b'ownCloud' disclosed a bug submitted by b'eugui' 
b'DROWN Attack'

03 Mar 2016

b'Informatica' disclosed a bug submitted by b'artem' 
b"[community.informatica.com] - CSRF in Private Messages allows to move user's messages to Trash"

02 Mar 2016

b'ownCloud' disclosed a bug submitted by b'gamhody_' 
b'No Any Kind of Protection on Delete account'

02 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'jyotisingh' 
b'Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View'

01 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'kratob2' 
b'Remote code execution using render :inline'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'mdv' 
b'XSS on hardware.shopify.com'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'derision' 
b'File name and folder enumeration.'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'pouya' 
b'create staff member without owner access'

29 Feb 2016

b'Gratipay' disclosed a bug submitted by b'try_hack_x' 
b'Sub Domian Take over'

28 Feb 2016

b'Coinbase' disclosed a bug submitted by b'datokaa' 
b'Balance Manipulation - BUG'

26 Feb 2016

b'LeaseWeb' disclosed a bug submitted by b'cliffordtrigo' 
b'DOM Based XSS in Checkout'

26 Feb 2016

b'ownCloud' disclosed a bug submitted by b'mrsihag' 
b'The csrf token remains same after user logs in'

25 Feb 2016

b'KIWI.KI GmbH' disclosed a bug submitted by b'paresh_parmar' 
b'Subdomain takeover : URGENT'

25 Feb 2016

b'Udemy' disclosed a bug submitted by b'decay' 
b'Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification'

24 Feb 2016

1 ... 662 663 664 665 666 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM