Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'RCE Possible Via Video Manager Export using @ character in Video Title'

04 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahsantahirat' 
b'Issue with password reset functionality [Minor]'

03 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahsantahirat' 
b'[URGENT] Password reset emails are sent in clear-text (without encryption)'

03 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahsantahirat' 
b'Session Management Issue CMS Airship'

02 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahsantahirat' 
b'User enumeration via Password reset page [Minor]'

02 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kelunik' 
b"Airship doesn't reject weak passwords"

02 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'abdullah' 
b'Full path disclosure when CSRF validation failed '

02 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'abdullah' 
b'Stored XSS using SVG '

02 Jul 2016

b'ownCloud' disclosed a bug submitted by b'businessprotect' 
b'Open Redirector via (apps/files_pdfviewer) for un-authenticated users.'

02 Jul 2016

b'HackerOne' disclosed a bug submitted by b'temmyscript' 
b'Unauthorized Team members viewing'

02 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'mefkan' 
b'Nginx Version Disclosure On Forbidden Page'

01 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'ahsantahirat' 
b'Email spoofing in security@paragonie.com'

01 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kelunik' 
b'Stored XSS in comments'

01 Jul 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'lukasreschke' 
b"Stored Cross-Site-Scripting in CMS Airship's authors profiles"

01 Jul 2016

b'HackerOne' disclosed a bug submitted by b'siddiki' 
b'Manipulate report timeline activity by using null byte.'

01 Jul 2016

b'Mail.Ru' disclosed a bug submitted by b'sudoshekhar' 
b'Back Refresh Attack after registration and successful logout'

01 Jul 2016

b'Coinbase' disclosed a bug submitted by b'ahsantahirat' 
b'No authorization required in iOS device web-application'

30 Jun 2016

b'Coinbase' disclosed a bug submitted by b'ahsantahirat' 
b'No authorization required in Windows phone web-application'

30 Jun 2016

b'Ruby' disclosed a bug submitted by b'jeremy' 
b'SMTP command injection'

30 Jun 2016

b'Pornhub' disclosed a bug submitted by b'zephrfish' 
b'Reflected XSS by way of jQuery function'

28 Jun 2016

1 ... 668 669 670 671 672 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM