Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Algolia' disclosed a bug submitted by b'bugs3ra' 
b'No rate-limit in Two factor Authentication leads to bypass using bruteforce attack'

01 Jun 2016

b'Algolia' disclosed a bug submitted by b'bugs3ra' 
b'API Key added for one Indices works for all other indices too.'

01 Jun 2016

b'Algolia' disclosed a bug submitted by b'bugs3ra' 
b'PHP version disclosed on blog.algolia.com'

01 Jun 2016

b'Algolia' disclosed a bug submitted by b'bugs3ra' 
b'User with limited access to Index configuration can rename the Index'

01 Jun 2016

b'BitHunt' disclosed a bug submitted by b'bugs3ra' 
b'No rate limit or captcha to identify humans'

01 Jun 2016

b'Zomato' disclosed a bug submitted by b'thisishrsh' 
b'Bypass OTP verification when placing Order'

01 Jun 2016

b'OpenSSL' disclosed a bug submitted by b'dadrian' 
b'Divide-and-conquer session key recovery in SSLv2 (CVE-2016-0703)'

01 Jun 2016

b'OpenSSL' disclosed a bug submitted by b'dadrian' 
b'Bleichenbacher oracle in SSLv2 (CVE-2016-0704)'

01 Jun 2016

b'Mapbox' disclosed a bug submitted by b'bugs3ra' 
b'Mapbox API Access Token with No Scope Can Read Styles'

31 May 2016

b'Mapbox' disclosed a bug submitted by b'apok' 
b'Denial of service in account statistics endpoint'

31 May 2016

b'Nginx' disclosed a bug submitted by b'anish2good' 
b'Module ngx_http_auth_basic_module is broken and allowing all password after specific length'

30 May 2016

b'Automattic' disclosed a bug submitted by b'eboda' 
b'Akismet Several CSRF vulnerabilities'

28 May 2016

b'Zomato' disclosed a bug submitted by b'vivek_patil' 
b'Authentication Bypassing and Sensitive Information Disclosure on Verify Email Address in Registration Flow'

28 May 2016

b'HackerOne' disclosed a bug submitted by b'apok' 
b'Denial of service in report view.'

27 May 2016

b'bitaccess' disclosed a bug submitted by b'trabajoduro_2' 
b'Missing SPF for hackerone.com'

27 May 2016

b'Udemy' disclosed a bug submitted by b'ankitsingh' 
b'Stored XSS at Udemy'

27 May 2016

b'Zomato' disclosed a bug submitted by b'murat' 
b'Persistent XSS on Reservation / Booking Page'

27 May 2016

b'Zomato' disclosed a bug submitted by b'murat' 
b'Reflected XSS on Zomato API'

27 May 2016

b'Phabricator' disclosed a bug submitted by b'apok' 
b'No authentication required to add an email address.'

27 May 2016

b'Uber' disclosed a bug submitted by b'razeeb' 
b"Bypassing Uber Partner's 3 Cancel Limit "

26 May 2016

1 ... 673 674 675 676 677 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM