Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Informatica' disclosed a bug submitted by b'artem' 
b"[community.informatica.com] - CSRF in Private Messages allows to move user's messages to Trash"

02 Mar 2016

b'ownCloud' disclosed a bug submitted by b'gamhody_' 
b'No Any Kind of Protection on Delete account'

02 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'jyotisingh' 
b'Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View'

01 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'kratob2' 
b'Remote code execution using render :inline'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'mdv' 
b'XSS on hardware.shopify.com'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'derision' 
b'File name and folder enumeration.'

01 Mar 2016

b'Shopify' disclosed a bug submitted by b'pouya' 
b'create staff member without owner access'

29 Feb 2016

b'Gratipay' disclosed a bug submitted by b'try_hack_x' 
b'Sub Domian Take over'

28 Feb 2016

b'Coinbase' disclosed a bug submitted by b'datokaa' 
b'Balance Manipulation - BUG'

26 Feb 2016

b'LeaseWeb' disclosed a bug submitted by b'cliffordtrigo' 
b'DOM Based XSS in Checkout'

26 Feb 2016

b'ownCloud' disclosed a bug submitted by b'mrsihag' 
b'The csrf token remains same after user logs in'

25 Feb 2016

b'KIWI.KI GmbH' disclosed a bug submitted by b'paresh_parmar' 
b'Subdomain takeover : URGENT'

25 Feb 2016

b'Udemy' disclosed a bug submitted by b'decay' 
b'Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b'Interstitial redirect bypass / open redirect in https://hackerone.com/zendesk_session'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'Unintended HTML inclusion as a result of https://hackerone.com/reports/110578'

24 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[3k.mail.ru] SQL Injection'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'charfee' 
b'Private Program Disclosure in /:handle/settings/allow_report_submission.json endpoint'

24 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'cyberpunkych' 
b'SSRF ?? element.mail.ru'

24 Feb 2016

b'InVision' disclosed a bug submitted by b'sarwarjahan' 
b'Deleting a Project for which the user is not owner but a normal member'

23 Feb 2016

b'Shopify' disclosed a bug submitted by b'brakhane' 
b"S3 Buckets open to the world thanks to 'Authenticated Users' ACL "

23 Feb 2016

1 ... 692 693 694 695 696 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM