Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Binary.com' disclosed a bug submitted by b'heracles' 
b'Full takeover of some binary.com sub domains'

05 Feb 2016

b'Shopify' disclosed a bug submitted by b'sergeym' 
b'many xss in widgets.shopifyapps.com'

04 Feb 2016

b'GlassWire' disclosed a bug submitted by b'ericlaw' 
b'DLL Hijacking Vulnerability in GlassWireSetup.exe'

04 Feb 2016

b'GlassWire' disclosed a bug submitted by b'ericlaw' 
b'GlassWireSetup.exe subject to EXE planting attack'

04 Feb 2016

b'Algolia' disclosed a bug submitted by b'esevece' 
b'Stored XSS on https://www.algolia.com/realtime-search-demo/*'

03 Feb 2016

b'Shopify' disclosed a bug submitted by b'ke_' 
b'CSRF in Connecting Pinterest Account'

02 Feb 2016

b'ownCloud' disclosed a bug submitted by b'ashesh' 
b'test1.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability'

01 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'paresh_parmar' 
b'XSS at forum : '

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'wesecureapp' 
b'Twitter Disconnect CSRF'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'wesecureapp' 
b'Attach Pinterest account - no State/CSRF parameter in Oauth Call back'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'reactors08' 
b'www.shopify.com XSS via third-party script'

01 Feb 2016

b'Shopify' disclosed a bug submitted by b'heracles' 
b'Full access to Amazon S3 bucket containing AWS CloudTrail logs'

01 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[afisha.mail.ru] SQL Injection'

01 Feb 2016

b'ownCloud' disclosed a bug submitted by b'ashesh' 
b's2.owncloud.com: SSL Session cookie without secure flag set'

27 Jan 2016

b'ownCloud' disclosed a bug submitted by b'd0znpp' 
b'XXE at host vpn.owncloud.com'

27 Jan 2016

b'HackerOne' disclosed a bug submitted by b'00day' 
b'Team Member(s) associated with a Group have Read-only permission (Post internal comments) can post comment to all the participants '

27 Jan 2016

b'Mail.Ru' disclosed a bug submitted by b'harry_mg' 
b'Multiple vulnerabilities in mail.ru subdomains'

27 Jan 2016

b'HackerOne' disclosed a bug submitted by b'intidc' 
b'HTML injection can lead to data theft'

26 Jan 2016

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b'IDOR- Activate Mopub on different organizations- steal api token- Fabric.io'

25 Jan 2016

b'Square Open Source' disclosed a bug submitted by b'bburky' 
b'git-fastclone allows arbitrary command execution through usage of ext remote URLs in submodules'

25 Jan 2016

1 ... 697 698 699 700 701 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM