Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ownCloud' disclosed a bug submitted by b'mrsihag' 
b'The csrf token remains same after user logs in'

25 Feb 2016

b'KIWI.KI GmbH' disclosed a bug submitted by b'paresh_parmar' 
b'Subdomain takeover : URGENT'

25 Feb 2016

b'Udemy' disclosed a bug submitted by b'decay' 
b'Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b'Interstitial redirect bypass / open redirect in https://hackerone.com/zendesk_session'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'Unintended HTML inclusion as a result of https://hackerone.com/reports/110578'

24 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'konqi' 
b'[3k.mail.ru] SQL Injection'

24 Feb 2016

b'HackerOne' disclosed a bug submitted by b'charfee' 
b'Private Program Disclosure in /:handle/settings/allow_report_submission.json endpoint'

24 Feb 2016

b'Mail.Ru' disclosed a bug submitted by b'cyberpunkych' 
b'SSRF ?? element.mail.ru'

24 Feb 2016

b'InVision' disclosed a bug submitted by b'sarwarjahan' 
b'Deleting a Project for which the user is not owner but a normal member'

23 Feb 2016

b'Shopify' disclosed a bug submitted by b'brakhane' 
b"S3 Buckets open to the world thanks to 'Authenticated Users' ACL "

23 Feb 2016

b'HackerOne' disclosed a bug submitted by b'zombiehelp54' 
b'Null byte injection '

23 Feb 2016

b'Udemy' disclosed a bug submitted by b'geekboy' 
b'Misconfigured SPF Record Flag'

22 Feb 2016

b'Udemy' disclosed a bug submitted by b'manishbitr' 
b'Stored XSS'

22 Feb 2016

b'LeaseWeb' disclosed a bug submitted by b'armaanpathan1' 
b'MISSING SPF RECORDS & MISSING DKIM POLICY'

22 Feb 2016

b'Coinbase' disclosed a bug submitted by b'hackeroxo1' 
b'Session Issue Maybe Can lead to huge loss [CRITICAL]'

21 Feb 2016

b'Gratipay' disclosed a bug submitted by b'n00b3rm4n' 
b'proxy port 7000 and shell port 514 not filtered'

20 Feb 2016

b'Gratipay' disclosed a bug submitted by b'n00b3rm4n' 
b'server calendar and server status available to public'

20 Feb 2016

b'HackerOne' disclosed a bug submitted by b'run' 
b'Requesting unknown file type returns Ruby object w/ address'

19 Feb 2016

b'HackerOne' disclosed a bug submitted by b'aboukir' 
b'User with Read-Only permissions can request/approve public disclosure'

19 Feb 2016

b'Automattic' disclosed a bug submitted by b'valievkarim' 
b'XSS at www.woothemes.com'

19 Feb 2016

1 ... 697 698 699 700 701 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM