Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ownCloud' disclosed a bug submitted by b'testalways' 
b'owncloud.com: WP Super Cache plugin is outdated'

30 Oct 2015

b'Keybase' disclosed a bug submitted by b'geeknik' 
b'xss '

30 Oct 2015

b'withinsecurity' disclosed a bug submitted by b'anshuman_bh' 
b'DDOS using xmlrpc.php'

29 Oct 2015

b'withinsecurity' disclosed a bug submitted by b'protector_47_two' 
b'Uses unsafe-inline without nonce '

28 Oct 2015

b'Yahoo!' disclosed a bug submitted by b'panchocosil' 
b'HTML Injection on flickr screename using IOS App'

27 Oct 2015

b'Mail.Ru' disclosed a bug submitted by b'hiddeneyes_pratikpanchal' 
b'Vulnerability :- "XSS vulnerability"'

24 Oct 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b'Some S3 Buckets are world readable (and one is world writeable)'

24 Oct 2015

b'InVision' disclosed a bug submitted by b'deepak_das' 
b'Enumeration and Guessable Email (OWASP-AT-002)T hrough Login Form'

23 Oct 2015

b'Shopify' disclosed a bug submitted by b'juhhga' 
b'Unauthenticated access to details of hidden products in any shop via title emuneration'

23 Oct 2015

b'InVision' disclosed a bug submitted by b'protector_47' 
b'CSRF Token in cookies!'

22 Oct 2015

b'Snapchat' disclosed a bug submitted by b'protector_47' 
b'Vulnerable to JavaScript injection. (WXS) (Javascript injection)!'

22 Oct 2015

b'Shopify' disclosed a bug submitted by b'dvl' 
b'Paid account can review\\download any invoice of any other shop'

22 Oct 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[start.icq.com] Reflected XSS via Cookies'

21 Oct 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[riot.mail.ru] Reflected XSS in debug-mode'

21 Oct 2015

b'Shopify' disclosed a bug submitted by b'reactors08' 
b'www.shopify.com XSS on blog pages via sharing buttons'

21 Oct 2015

b'HackerOne' disclosed a bug submitted by b'rohan_x3' 
b'Content spoofing on invitations page '

21 Oct 2015

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Privileged information of a private/sandboxed program is leaked in json response to an unauthorized user'

21 Oct 2015

b'Shopify' disclosed a bug submitted by b'pouya' 
b'Unauthorized access to all collections, products, pages from other stores'

20 Oct 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b'Arbitrary read on s3://shopify-delivery-app-storage/files'

20 Oct 2015

b'Zopim' disclosed a bug submitted by b'mdv' 
b'Cross-site Scripting in all Zopim'

20 Oct 2015

1 ... 665 666 667 668 669 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM