Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'dvl' 
b'Paid account can review\\download any invoice of any other shop'

22 Oct 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[start.icq.com] Reflected XSS via Cookies'

21 Oct 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[riot.mail.ru] Reflected XSS in debug-mode'

21 Oct 2015

b'Shopify' disclosed a bug submitted by b'reactors08' 
b'www.shopify.com XSS on blog pages via sharing buttons'

21 Oct 2015

b'HackerOne' disclosed a bug submitted by b'rohan_x3' 
b'Content spoofing on invitations page '

21 Oct 2015

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Privileged information of a private/sandboxed program is leaked in json response to an unauthorized user'

21 Oct 2015

b'Shopify' disclosed a bug submitted by b'pouya' 
b'Unauthorized access to all collections, products, pages from other stores'

20 Oct 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b'Arbitrary read on s3://shopify-delivery-app-storage/files'

20 Oct 2015

b'Zopim' disclosed a bug submitted by b'mdv' 
b'Cross-site Scripting in all Zopim'

20 Oct 2015

b'Automattic' disclosed a bug submitted by b'blinkms' 
b'XSS in WordPress '

16 Oct 2015

b'Shopify' disclosed a bug submitted by b'pulkit_pandey' 
b'amazon aws s3 bucket content is public :- http://shopify.com.s3.amazonaws.com/'

15 Oct 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b'Arbitrary write on s3://shopify-delivery-app-storage/files'

15 Oct 2015

b'PHP' disclosed a bug submitted by b'sparaschoudis' 
b'AddressSanitizer reports a global buffer overflow in mkgmtime() function'

15 Oct 2015

b'PHP' disclosed a bug submitted by b'sparaschoudis' 
b'Integer overflow in unserialize() (32-bits only)'

15 Oct 2015

b'Vimeo' disclosed a bug submitted by b'satishb3' 
b'A user can enhance their videos with paid tracks without buying the track'

14 Oct 2015

b'Shopify' disclosed a bug submitted by b'marhvhelous' 
b'Privilege escalation vulnerability'

14 Oct 2015

b'Shopify' disclosed a bug submitted by b'pouya' 
b'change Login Services settings without owner access'

14 Oct 2015

b'Trello' disclosed a bug submitted by b'sarwarjahan' 
b'Normal User can add new users to group'

14 Oct 2015

b'Coinbase' disclosed a bug submitted by b'fgplayit2' 
b'SPF records not found'

14 Oct 2015

b'Shopify' disclosed a bug submitted by b'pouya' 
b'unauthorized access to all collections name'

14 Oct 2015

1 ... 672 673 674 675 676 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM