Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'blueberryinfosec' 
b'Create account in uber without signup form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'xss001' 
b'Self-XSS Vulnerability on Password Reset Form'

13 Jun 2016

b'Uber' disclosed a bug submitted by b'rohk' 
b'Active Email Hyperlink Sent on riders.uber.com'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'sasi2103' 
b'XML Parser Bug: XXE over which leads to RCE'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'mugeesahmed' 
b'XSS in Blog '

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'ahsantahirat' 
b'Ngnix Server version disclosure'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'muzammilabbaskayani' 
b'Bypassing Password Reset '

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'ullger' 
b'Bypass password complexity requirements on passsword reset page'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'bashlogic' 
b'node.drchrono.com - Information Disclosure and Windows Host Exposed'

13 Jun 2016

b'drchrono' disclosed a bug submitted by b'yaworsk' 
b'Stored XSS via AngularJS Injection'

13 Jun 2016

b'New Relic' disclosed a bug submitted by b'shailesh4594' 
b'Open redirection bypass'

13 Jun 2016

b'Moneybird' disclosed a bug submitted by b'hackheaven123' 
b'Stored XSS in Financial Account executing in Bank tab'

13 Jun 2016

b'New Relic' disclosed a bug submitted by b'vikinghoarder' 
b'rpm.newrelic.com - monitor creation to other accounts'

13 Jun 2016

b'Moneybird' disclosed a bug submitted by b'hackheaven' 
b'Malicious File Upload'

13 Jun 2016

b'Moneybird' disclosed a bug submitted by b'yaworsk' 
b'Employees with Any Permissions Can Create App with Full Permissions and Perform any API Action'

13 Jun 2016

b'Moneybird' disclosed a bug submitted by b'trabajoduro' 
b'CSV Injection with the CSV export feature'

13 Jun 2016

b'Veris' disclosed a bug submitted by b'ashishdhaduk' 
b'Security Vulnerability - SMTP protection not used'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'aziose' 
b'Wordpress Pingback DDoS Attacks in domain: veris.in'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'girish_s_pattanashetty' 
b'Creating multiple user with the same link which is sent to email after registeration'

12 Jun 2016

b'Veris' disclosed a bug submitted by b'itly' 
b'Critical - Insecure Direct Object Reference - Deleting any member of any organization remotely'

12 Jun 2016

1 ... 672 673 674 675 676 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM