Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in Testimonial name'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in Testimonial Position'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in testimonial Company'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS In Company URL'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in Bio/Quote'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in Message to Display When No Pages Listed.'

08 Jul 2015

b'concrete5' disclosed a bug submitted by b'ishahriyar' 
b'Stored XSS in Image Alt. Text'

08 Jul 2015

b'Udemy' disclosed a bug submitted by b'adrianbelen' 
b'xss on autoserch'

08 Jul 2015

b'OkCupid' disclosed a bug submitted by b'artem' 
b'Stored XSS in popup messages window'

06 Jul 2015

b'HackerOne' disclosed a bug submitted by b'danlec' 
b'In markdown, parsing things like @danlec and #46072 after links is unsafe'

04 Jul 2015

b'Shopify' disclosed a bug submitted by b'sukhoi' 
b"Shopify android client all API request's response leakage, including access_token, cookie, response header, response body content"

04 Jul 2015

b'Airbnb' disclosed a bug submitted by b'faisalahmed' 
b'I Can Delete Any Airbnb Users Symbol!'

03 Jul 2015

b'Shopify' disclosed a bug submitted by b'pranav_hivarekar' 
b'Open redirection in OAuth'

03 Jul 2015

b'Python' disclosed a bug submitted by b'tukan' 
b'use after free in load_newobj_ex'

02 Jul 2015

b'Shopify' disclosed a bug submitted by b'wesecureapp' 
b'[persistent cross-site scripting] customers can target admins'

01 Jul 2015

b'HackerOne' disclosed a bug submitted by b'danlec' 
b'Markdown code block sequence makes report unreadable'

29 Jun 2015

b'Python' disclosed a bug submitted by b'johnleitch' 
b'bytearray.find Buffer Over-read'

29 Jun 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear' 
b'???????????? ????????? ?? ???? ?????????? ? IIS'

28 Jun 2015

b'Mail.Ru' disclosed a bug submitted by b'niyaax' 
b'No bruteforce protection leads to enumeration of emails in http://e.mail.ru/'

28 Jun 2015

b'Vimeo' disclosed a bug submitted by b'securityidiots' 
b'Open Redirection Security Filter bypassed'

28 Jun 2015

1 ... 684 685 686 687 688 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM