Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WePay' disclosed a bug submitted by b'sl1m' 
b'2-step Verification bypass'

20 Apr 2016

b'Mapbox' disclosed a bug submitted by b'hussain' 
b'Stored Cross-Site Scripting in Map Share Page'

19 Apr 2016

b'Mapbox' disclosed a bug submitted by b'hussain' 
b'Disclosure of map information'

19 Apr 2016

b'Informatica' disclosed a bug submitted by b'konqi' 
b'[informatica.com] Blind SQL Injection'

19 Apr 2016

b'HackerOne' disclosed a bug submitted by b'paulos_' 
b'Reputation Manipulation (Theoretical)'

19 Apr 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Bypassing password authentication of users that have 2FA enabled'

18 Apr 2016

b'Imgur' disclosed a bug submitted by b'sl1m' 
b'SSRF and local file read in video to gif converter'

16 Apr 2016

b'Imgur' disclosed a bug submitted by b'sl1m' 
b'Local file read in image editor'

16 Apr 2016

b'Shopify' disclosed a bug submitted by b'pratyush_saini' 
b'Bypassed password authentication before enabling OTP verification'

15 Apr 2016

b'ownCloud' disclosed a bug submitted by b'safa' 
b'doc.owncloud.org: XSS via Referrer'

15 Apr 2016

b'Trello' disclosed a bug submitted by b'kalihat007' 
b'Cross site scripting in blog.trello.com'

14 Apr 2016

b'Dropbox' disclosed a bug submitted by b'shield' 
b'No Rate Limiting while sending the feedback under Dropbox Help Centre'

13 Apr 2016

b'Adobe' disclosed a bug submitted by b'skansing' 
b'Reflected XSS via. search'

13 Apr 2016

b'Udemy' disclosed a bug submitted by b'yog3ndra' 
b'Session Takeover vulnerability '

13 Apr 2016

b'Xero' disclosed a bug submitted by b'er_pratik_panchal_infobit' 
b'Vulnerability : XSS Vulnerability '

13 Apr 2016

b'Badoo' disclosed a bug submitted by b'ngocdh' 
b'Password modification without knowing actual password & httpOnly bypass'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'kenan' 
b'Insecure Direct Object Reference on badoo.com'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'zombiehelp54' 
b'[CRITICAL] Full account takeover using CSRF'

12 Apr 2016

b'OpenSSL' disclosed a bug submitted by b'hanno' 
b'BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)'

12 Apr 2016

b'ownCloud' disclosed a bug submitted by b'kalihat007' 
b'Cross site scripting in apps.owncloud.com'

12 Apr 2016

1 ... 666 667 668 669 670 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM