Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zendesk' disclosed a bug submitted by b'a0xnirudh' 
b'Stored XSS in comments'

01 Jan 2016

b'HackerOne' disclosed a bug submitted by b'avlidienbrunn' 
b'CSRF possible when SOP Bypass/UXSS is available '

30 Dec 2015

b'Khan Academy' disclosed a bug submitted by b'benburrill' 
b'Escaping the iframe via exceptions'

29 Dec 2015

b'HackerOne' disclosed a bug submitted by b'h1-' 
b"Team Member(s) associated with a Custom Group Created with 'Program Managment' only permissions can Comments on Bug Reports "

29 Dec 2015

b'Snapchat' disclosed a bug submitted by b'reecer' 
b'Password Reset - query param overrides postdata'

24 Dec 2015

b'Coinbase' disclosed a bug submitted by b'paulos_' 
b'User email enumuration using Gmail'

23 Dec 2015

b'Imgur' disclosed a bug submitted by b'dipak_das' 
b'"Sign me out everywhere" does not work for desktop sessions'

23 Dec 2015

b'Shopify' disclosed a bug submitted by b'juhhga' 
b'Reflected XSS in cart at hardware.shopify.com'

22 Dec 2015

b'Twitter' disclosed a bug submitted by b'hussein98d' 
b'URGENT : NICHE.co Account Take Over Vulnerability'

21 Dec 2015

b'Coinbase' disclosed a bug submitted by b'sick-sec' 
b'HTML injection in apps user review '

21 Dec 2015

b'Shopify' disclosed a bug submitted by b'krankopwnz' 
b'Reflective XSS on wholesale.shopify.com'

21 Dec 2015

b'Nearby Live' disclosed a bug submitted by b'xavinux' 
b'Web Server information disclosure.'

20 Dec 2015

b'HackerOne' disclosed a bug submitted by b'rastikrus' 
b'Changes to repost content'

19 Dec 2015

b'Binary.com' disclosed a bug submitted by b'blinkms' 
b'Cookie bug'

16 Dec 2015

b'Shopify' disclosed a bug submitted by b'batman' 
b'Open Redirect at *.myshopify.com/account/login?checkout_url='

16 Dec 2015

b'Coinbase' disclosed a bug submitted by b'sick-sec' 
b'XXE in OAuth2 Applications gallery profile App logo'

16 Dec 2015

b'Phabricator' disclosed a bug submitted by b'fnqgpc' 
b'libphutil: removing bytes from a PhutilRope does not work as intended'

16 Dec 2015

b'Khan Academy' disclosed a bug submitted by b'red4killeer' 
b'Html injection on khanacademy'

14 Dec 2015

b'Shopify' disclosed a bug submitted by b'rms' 
b'An administrator without any permission is able to get order notifications using his APNS Token.'

14 Dec 2015

b'Shopify' disclosed a bug submitted by b'blinkms' 
b'Open redirect using theme install'

14 Dec 2015

1 ... 692 693 694 695 696 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM