Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby on Rails' disclosed a bug submitted by b'arthurnn' 
b'[Rails42] We can inject HTML tags when server is using strip_tags method'

13 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'tenderlove' 
b'DoS Attack in Controller Lookup Code'

13 Mar 2016

b'Ruby on Rails' disclosed a bug submitted by b'd_w' 
b'http_basic_authenticate_with is suseptible to timing attacks.'

13 Mar 2016

b'Shopify' disclosed a bug submitted by b'hussein98d' 
b'Strored Cross Site Scripting'

13 Mar 2016

b'Zomato' disclosed a bug submitted by b'mugeesahmed' 
b'Weak Password Policy'

13 Mar 2016

b'Imgur' disclosed a bug submitted by b'aesteral' 
b'SSRF in https://imgur.com/vidgif/url'

12 Mar 2016

b'Shopify' disclosed a bug submitted by b'wakadotz' 
b'Injection via CSV Export feature in Admin Orders'

12 Mar 2016

b'Badoo' disclosed a bug submitted by b'bugdisclose' 
b'Account Takeover'

12 Mar 2016

b'ownCloud' disclosed a bug submitted by b'architaa' 
b'owncloud.com: Account Compromise Through CSRF'

11 Mar 2016

b'ownCloud' disclosed a bug submitted by b'nait_lamine' 
b'apps.owncloud.com: CSRF change privacy settings'

11 Mar 2016

b'Zomato' disclosed a bug submitted by b'pr0tagon1st' 
b'XSS via modified Zomato widget (res_search_widget.php)'

11 Mar 2016

b'Mail.Ru' disclosed a bug submitted by b'architaa' 
b'Cross Site Scripting'

10 Mar 2016

b'Mail.Ru' disclosed a bug submitted by b'lukazorge' 
b'Time-Based Blind SQL Injection Attacks'

10 Mar 2016

b'ownCloud' disclosed a bug submitted by b'psych0tr1a' 
b'apps.owncloud.com: Multiple reflected XSS by insecure URL generation (IE only)'

10 Mar 2016

b'ownCloud' disclosed a bug submitted by b'nait_lamine' 
b'CSRF in apps.owncloud.com'

10 Mar 2016

b'ownCloud' disclosed a bug submitted by b'prayas' 
b'Lack of HSTS on https://apps.owncloud.com'

10 Mar 2016

b'Zomato' disclosed a bug submitted by b'arbaz_hussain' 
b'Subdomain Takeover '

09 Mar 2016

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pouya' 
b'Full Path Disclosure'

09 Mar 2016

b'HackerOne' disclosed a bug submitted by b'sw3nlab' 
b'Denial of Service any Report'

09 Mar 2016

b'ThisData' disclosed a bug submitted by b'dbpentest' 
b'Login CSRF using Google OAuth'

08 Mar 2016

1 ... 695 696 697 698 699 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM