Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'pouya' 
b'customers password hash leak!!!!'

05 Oct 2015

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b"Insecure Direct Object Reference - access to other user/group DM's"

03 Oct 2015

b'Shopify' disclosed a bug submitted by b'satishb3' 
b'Shop admin can change external login services'

02 Oct 2015

b'Anghami' disclosed a bug submitted by b'aaj__' 
b'[https://www.anghami.com/updatemailinfo/] Sql Injection'

02 Oct 2015

b'Anghami' disclosed a bug submitted by b'egyxos' 
b'[CRITICAL] Login To Any Account Linked With Google+ With Email Only'

02 Oct 2015

b'Hired' disclosed a bug submitted by b'mohammedalsaggaf' 
b'URGENT - Subdomain Takeover on be.hired.com. due to unclaimed domain pointing to Heroku.com'

01 Oct 2015

b'Phabricator' disclosed a bug submitted by b'superkritisch' 
b"Multiple so called 'type juggling' attacks. Most notably PhabricatorUser::validateCSRFToken() is 'bypassable' in certain cases."

01 Oct 2015

b'Zaption' disclosed a bug submitted by b'psychomantis' 
b'CSV Excel Macro Injection in Export Response'

01 Oct 2015

b'Hired' disclosed a bug submitted by b'yujitounai' 
b'Stored XSS in Company Name'

30 Sep 2015

b'Shopify' disclosed a bug submitted by b'acid_creative' 
b'Passwords Returned in Later Responses.'

30 Sep 2015

b'Shopify' disclosed a bug submitted by b'prakharprasad' 
b'Prevent Shop Admin From Seeing his Installed Apps / Install Persistent Unremovable App'

29 Sep 2015

b'PHP' disclosed a bug submitted by b'libnex' 
b'Null pointer dereference in phar_get_fp_offset()'

29 Sep 2015

b'PHP' disclosed a bug submitted by b'haquaman' 
b'Uninitialized pointer in phar_make_dirstream'

29 Sep 2015

b'Vimeo' disclosed a bug submitted by b'vijay_kumar1110' 
b'Share your channel to any user on vimeo without following him'

28 Sep 2015

b'ownCloud' disclosed a bug submitted by b'bigbear_' 
b'[s3.owncloud.com] Web Server HTTP Trace/Track Method Support '

28 Sep 2015

b'ownCloud' disclosed a bug submitted by b'ashish_padelkar' 
b'No email verification during registration'

28 Sep 2015

b'QIWI' disclosed a bug submitted by b'pradeepch99' 
b'Session Cookie without HttpOnly and secure flag set'

27 Sep 2015

b'Python' disclosed a bug submitted by b'hugbounter' 
b'Integer overflow in _Unpickler_Read'

26 Sep 2015

b'Udemy' disclosed a bug submitted by b'decay' 
b'Extremely high Course rating values could be set in order to make really high Average rating of the course. Negative values could be set to.'

25 Sep 2015

b'HackerOne' disclosed a bug submitted by b'ericr' 
b'Minor Bug: Public un-compiled CSS with original sass, versioning, source map, comments, etc.'

25 Sep 2015

1 ... 697 698 699 700 701 ... 761

BY DENIS WERNER - @NOBBD - IMPRESSUM