Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'bugdisclose' 
b'Sub-Domain Takeover'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b'User enumeration via error message'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b'Insecure Direct Member Disclosure'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b"Insecure Direct 'org-invite-log' References"

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b"Insecure Direct 'org-visitor-log' References"

18 Mar 2016

b'HackerOne' disclosed a bug submitted by b'anshuman_bh' 
b'Sending emails (via HackerOne) impersonating other users'

18 Mar 2016

b'Automattic' disclosed a bug submitted by b'voodookobra' 
b'Possible Timing Side-Channel in XMLRPC Verification'

17 Mar 2016

b'Veris' disclosed a bug submitted by b'yaworsk' 
b'Not Using Secure Flag Option on Cookies Could Lead to a Man in the Middle Session Highjacking'

17 Mar 2016

b'HackerOne' disclosed a bug submitted by b'charfe' 
b'Private program activity timeline information disclosure'

16 Mar 2016

b'Gratipay' disclosed a bug submitted by b'kira_evil' 
b'The POODLE attack (SSLv3 supported) for https://grtp.co/'

16 Mar 2016

b'Shopify' disclosed a bug submitted by b'sergeym' 
b'xss in the all widgets of shopifyapps.com'

16 Mar 2016

b'Gratipay' disclosed a bug submitted by b'shahzaib-shani' 
b'SPF DNS Record '

15 Mar 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[orsotenslimselfie.lady.mail.ru] SQL Injection'

15 Mar 2016

b'Badoo' disclosed a bug submitted by b'darshitvarotaria' 
b'Broken Authentication on Badoo'

15 Mar 2016

b'Shopify' disclosed a bug submitted by b'niyaax' 
b'Stored XSS in https://checkout.shopify.com/'

15 Mar 2016

b'HackerOne' disclosed a bug submitted by b'rohk' 
b'Edit Auto Response Messages'

15 Mar 2016

b'ownCloud' disclosed a bug submitted by b'gorang_joshi' 
b'owncloud.com: Parameter pollution in social sharing buttons'

14 Mar 2016

b'Imgur' disclosed a bug submitted by b'aesteral' 
b'SSRF / Local file enumeration / DoS due to improper handling of certain file formats by ffmpeg'

14 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'benmmurphy' 
b'Data-Tags and the New HTML Sanitizer Subverts CSRF protection'

13 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'garnu' 
b'Potential XSS on sanitize/Rails::Html::WhiteListSanitizer'

13 Mar 2016

1 ... 694 695 696 697 698 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM