Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'harry_mg' 
b'Stored XSS in Slack (weird, trial and error)'

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b"A 'Full access' administrator is able to see the shop owners user details"

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'rms' 
b'List of devices is accessible regardless of the account limitations'

10 Nov 2015

b'Slack' disclosed a bug submitted by b'harry_mg' 
b'Reflected Self-XSS in Slack'

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b"'Limited' RCE in certain places where Liquid is accepted"

10 Nov 2015

b'Udemy' disclosed a bug submitted by b'robd4k' 
b'XSS Vulnerability'

09 Nov 2015

b'Shopify' disclosed a bug submitted by b'hazimaslam' 
b'First & Last Name Disclosure of any Shopify Store Admin'

09 Nov 2015

b'ownCloud' disclosed a bug submitted by b'tomdev' 
b'RCE in ci.owncloud.com / ci.owncloud.org'

09 Nov 2015

b'Python' disclosed a bug submitted by b'johnleitch' 
b'PyFloat_FromString & PyNumber_Long Buffer Over-reads'

08 Nov 2015

b'Shopify' disclosed a bug submitted by b'hazimaslam' 
b"Unauthorized access to any Store Admin's First & Last name"

07 Nov 2015

b'InVision' disclosed a bug submitted by b'mrrel' 
b'Multiple Upload Vulnerability !File Upload + File Inclusion (Access Not Forbidden)'

06 Nov 2015

b'Zopim' disclosed a bug submitted by b'psychomantis' 
b'CSV Excel Macro Injection Vulnerability in export chat logs'

05 Nov 2015

b'Binary.com' disclosed a bug submitted by b'shailesh4594' 
b'User Enumeration : Due to rate limiting on registration'

05 Nov 2015

b'The Internet' disclosed a bug submitted by b'sparaschoudis' 
b'libcurl duphandle read out of bounds'

05 Nov 2015

b'ownCloud' disclosed a bug submitted by b'ala_arfaoui' 
b'apps.owncloud.com: Potential XSS'

04 Nov 2015

b'Shopify' disclosed a bug submitted by b'pouya' 
b'get users information without full access'

04 Nov 2015

b'Shopify' disclosed a bug submitted by b'jitendra' 
b'Bypassing password requirement during deletion of accout'

03 Nov 2015

b'Shopify' disclosed a bug submitted by b'uname' 
b'Domain takoever - https://sellocdn.com'

03 Nov 2015

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Staff members with no permission to access domains can access them.'

03 Nov 2015

b'Mail.Ru' disclosed a bug submitted by b'sw3nlab' 
b'?????? ??????????'

02 Nov 2015

1 ... 676 677 678 679 680 ... 744

BY DENIS WERNER - @NOBBD - IMPRESSUM