Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Dropbox' disclosed a bug submitted by b'albinowax' 
b'Lack of account link warning enables dropbox hijacking'

27 Jun 2016

b'WebSummit' disclosed a bug submitted by b'anony-123' 
b'Time Based SQL injection in url parameter'

27 Jun 2016

b'Mail.Ru' disclosed a bug submitted by b'whitedragon143' 
b'BRUTE FORCE ATTACK'

27 Jun 2016

b'Python' disclosed a bug submitted by b'guido' 
b'Heap corruption via Python 2.7.11 IOBase readline()'

26 Jun 2016

b'concrete5' disclosed a bug submitted by b'egix' 
b'Local File Inclusion Vulnerability in Concrete5 version 5.7.3.1'

26 Jun 2016

b'concrete5' disclosed a bug submitted by b'egix' 
b'Multiple Stored Cross Site Scripting Vulnerabilities in Concrete5 version 5.7.3.1'

26 Jun 2016

b'concrete5' disclosed a bug submitted by b'egix' 
b'Multiple Cross Site Request Forgery Vulnerabilities in Concrete5 version 5.7.3.1'

26 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'ahmed_saleh' 
b'Stored number of clicks in the Deposits button'

26 Jun 2016

b'Pornhub' disclosed a bug submitted by b'mak' 
b'Access to repository on https://netreact.eu/hubtraffic/ with full access to source and commit privileges'

25 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'ahmed_saleh' 
b'Bypass logout '

25 Jun 2016

b'FantasyTote' disclosed a bug submitted by b'tayyab-qadir' 
b'Urgent Fix Balance Limit bypass '

25 Jun 2016

b'Slack' disclosed a bug submitted by b'computerality' 
b'OSX slack:// protocol handler javascript injection'

24 Jun 2016

b'Nextcloud' disclosed a bug submitted by b'zeroknife' 
b'REG: Content provider information leakage'

24 Jun 2016

b'HackerOne' disclosed a bug submitted by b'arneswinnen' 
b'Web Authentication Endpoint Credentials Brute-Force Vulnerability'

23 Jun 2016

b'Bime' disclosed a bug submitted by b'michiel' 
b'Subdomain takeover due to unclaimed Amazon S3 bucket on a2.bime.io'

22 Jun 2016

b'ThisData' disclosed a bug submitted by b'7h0r4pp4n' 
b'Host Header Poisoning in thisdata.com'

22 Jun 2016

b'bitaccess' disclosed a bug submitted by b'geekboy' 
b'BYASSING OTP Verification'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'awake' 
b'CSV Macro injection in Video Manager (CEMI)'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'Public Facing Barracuda Login'

22 Jun 2016

b'Pornhub' disclosed a bug submitted by b'mak' 
b'Multiple endpoints are vulnerable to XML External Entity injection (XXE) '

22 Jun 2016

1 ... 665 666 667 668 669 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM