Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Veris' disclosed a bug submitted by b'itly' 
b'Missing Server Side Validation of CSRF Middleware Token in Change Password Request'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Multiple Stored XSS on Sanbox.veris.in through Veris Frontdesk Android App'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Can select any Parent while creating new Venue'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get Rules of any organization remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Make Rule for Any Group & Any Venue remotely'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical IDOR - Get venue data of any organization remotely'

12 Jun 2016

b'Uber' disclosed a bug submitted by b'r0t1v' 
b'Enumerating userIDs with phone numbers'

11 Jun 2016

b'Moneybird' disclosed a bug submitted by b'krankopwnz' 
b'Reflected XSS in Backend search'

11 Jun 2016

b'Sucuri' disclosed a bug submitted by b'jackds' 
b'CRLF/HTTP header injection www.sucuri.net'

10 Jun 2016

b'Badoo' disclosed a bug submitted by b'nikitchenko' 
b'????????? ????????? ???????? ???????????'

09 Jun 2016

b'Binary.com' disclosed a bug submitted by b'ameer0x0a' 
b'CJ vulnerability in subdomain'

09 Jun 2016

b'Trello' disclosed a bug submitted by b'thezawad' 
b'XSS in Jetpack plugin'

08 Jun 2016

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'Possibly big authorization problem in L\xc3\xa4hitapiola\xc2\xb4s varainhoito'

08 Jun 2016

b'Veris' disclosed a bug submitted by b'footstep' 
b'Unauthenticated CSRF(User can input any value for CSRF Token)'

08 Jun 2016

b'Phabricator' disclosed a bug submitted by b'fnqgpc' 
b'Full path disclosure'

08 Jun 2016

b'HackerOne' disclosed a bug submitted by b'c666a323be94d57' 
b'RCE in profile picture upload'

08 Jun 2016

b'Coinbase' disclosed a bug submitted by b'anik' 
b'Transaction Pending Via Ip Change '

07 Jun 2016

b'Uber' disclosed a bug submitted by b'err' 
b'Password Reset Does Not Confirm the Existence of an Email Address'

07 Jun 2016

b'New Relic' disclosed a bug submitted by b'the_joker' 
b'Session takeover'

06 Jun 2016

b'QIWI' disclosed a bug submitted by b'ngaurav' 
b'SSL Certificate on qiwi.com will expire soon.'

06 Jun 2016

1 ... 672 673 674 675 676 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM