Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Badoo' disclosed a bug submitted by b'ngocdh' 
b'Password modification without knowing actual password & httpOnly bypass'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'kenan' 
b'Insecure Direct Object Reference on badoo.com'

12 Apr 2016

b'Badoo' disclosed a bug submitted by b'zombiehelp54' 
b'[CRITICAL] Full account takeover using CSRF'

12 Apr 2016

b'OpenSSL' disclosed a bug submitted by b'hanno' 
b'BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)'

12 Apr 2016

b'ownCloud' disclosed a bug submitted by b'kalihat007' 
b'Cross site scripting in apps.owncloud.com'

12 Apr 2016

b'APITest.IO' disclosed a bug submitted by b'uyga' 
b'beta version reveals paths, environment variables and partially files contents'

12 Apr 2016

b'Dropbox' disclosed a bug submitted by b'super_hack' 
b'Possible SQL injection can cause denial of service attack'

10 Apr 2016

b'Shopify' disclosed a bug submitted by b'virtualhunter' 
b'XSS on hardware.shopify.com'

09 Apr 2016

b'ownCloud' disclosed a bug submitted by b'nehalh13' 
b'X-XSS-Protection not enabled'

09 Apr 2016

b'Trello' disclosed a bug submitted by b'theflofly' 
b'Payments informations are sent to the webhook when a team changes its visibility'

07 Apr 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'93c08539' 
b'Other Buffer Overflow in PHP of the AirMax Products'

07 Apr 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'93c08539' 
b'Yet another Buffer Overflow in PHP of the AirMax Products'

07 Apr 2016

b'Zomato' disclosed a bug submitted by b'pr0tagon1st' 
b'Persistent input validation mail encoding vulnerability in the "just followed you" email notification.'

07 Apr 2016

b'Mail.Ru' disclosed a bug submitted by b'seifelsallamy' 
b'VERY DANGEROUS XSS STORED inside emails '

07 Apr 2016

b'New Relic' disclosed a bug submitted by b'xenonstory' 
b'Old CAPTCHA offers no protection'

07 Apr 2016

b'Gratipay' disclosed a bug submitted by b'shahzaib-shani' 
b'prevent content spoofing on /search'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'pavanw3b' 
b'Reflected XSS on Uber.com careers'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'XSS in getrush.uber.com '

06 Apr 2016

b'Uber' disclosed a bug submitted by b'ddworken' 
b'HTML Escaping Error in the 404 Page on developer.uber.com/docs/'

06 Apr 2016

b'Uber' disclosed a bug submitted by b'orange' 
b'uber.com may RCE by Flask Jinja2 Template Injection'

06 Apr 2016

1 ... 683 684 685 686 687 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM