Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'mdv' 
b'CSRF on https://shopify.com/plus'

17 Feb 2016

b'Twitter' disclosed a bug submitted by b'maxy' 
b'Can see private tweets via keyword searches on tweetdeck'

16 Feb 2016

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b'CSV Injection via the CSV export feature'

16 Feb 2016

b'HackerOne' disclosed a bug submitted by b'pisarenko' 
b'attack in not an authorized user'

16 Feb 2016

b'Snapchat' disclosed a bug submitted by b'harry_mg' 
b'Subdomain takeover in http://support.scan.me pointing to Zendesk (a Snapchat acquisition)'

16 Feb 2016

b'HackerOne' disclosed a bug submitted by b'charfe' 
b'Private Program Disclosure in /:handle/reports/draft.json endpoint'

16 Feb 2016

b'Gratipay' disclosed a bug submitted by b'ankushmohanty' 
b'UDP port 5060 (SIP) Open'

16 Feb 2016

b'ownCloud' disclosed a bug submitted by b'securitary' 
b'owncloud.com: Persistent XSS In Account Profile'

15 Feb 2016

b'Gratipay' disclosed a bug submitted by b'rajatsharma' 
b'nginx SPDY heap buffer overflow for https://grtp.co/'

15 Feb 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'aparecekarl' 
b'Subdomain Takeover in http://assets.goubiquiti.com/'

14 Feb 2016

b'Ubiquiti Networks' disclosed a bug submitted by b'93c08539' 
b'Arbritrary file Upload on AirMax'

13 Feb 2016

b'Ruby on Rails' disclosed a bug submitted by b'forced-request' 
b'Explicit, dynamic render path: Dir. Trav + RCE'

12 Feb 2016

b'Ruby on Rails' disclosed a bug submitted by b'zachaysan' 
b'Changeable model ids on vanilla update can lead to severely bad side-effects'

12 Feb 2016

b'Ruby on Rails' disclosed a bug submitted by b'jcoyne' 
b'Nested attributes reject_if proc can be circumvented by providing "_destroy" parameter'

12 Feb 2016

b'Ruby on Rails' disclosed a bug submitted by b'backus' 
b'Validation bypass for Active Record and Active Model'

12 Feb 2016

b'Khan Academy' disclosed a bug submitted by b'benmassaoud' 
b'XSS vulnerability in "/coach/roster/" ( create your first class) '

12 Feb 2016

b'Gratipay' disclosed a bug submitted by b'prince' 
b'grtp.co is vulnerable to http-vuln-cve2011-3192'

12 Feb 2016

b'Caviar' disclosed a bug submitted by b'cliffordtrigo' 
b'Remotely modifying courier Account Details'

11 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[allods.my.com] SSRF / XSPA'

11 Feb 2016

b'ownCloud' disclosed a bug submitted by b'arover7' 
b'otrs.owncloud.com: Reflected Cross-Site Scripting'

10 Feb 2016

1 ... 695 696 697 698 699 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM