REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Zendesk'
disclosed a bug submitted by
b'zombiehelp54'
b'Stored XSS in comments'
13 Nov 2015
b'Mail.Ru'
disclosed a bug submitted by
b'bigbear_'
b'[ling.go.mail.ru] Server-Status opened for all users'
13 Nov 2015
b'Binary.com'
disclosed a bug submitted by
b'paulos_'
b'Cross Site Scripting'
13 Nov 2015
b'ownCloud'
disclosed a bug submitted by
b'mohammedalsaggaf'
b'owncloud.com: Content Sniffing not disabled'
12 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'elamaran619'
b'Privilege escalation and circumvention of permission to limited access user'
11 Nov 2015
b'Slack'
disclosed a bug submitted by
b'hassham'
b'File upload XSS (Java applet) on http://slackatwork.com/'
11 Nov 2015
b'Slack'
disclosed a bug submitted by
b'harry_mg'
b'Self-XSS in posts by formatting text as code'
10 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'shahmeer-amir'
b'Accessing Payments page and adding payment methods with limited access accounts'
10 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'shahmeer-amir'
b'Missing authorization check on dashboard overviews'
10 Nov 2015
b'Slack'
disclosed a bug submitted by
b'harry_mg'
b'Stored XSS in Slack (weird, trial and error)'
10 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'brakhane'
b"A 'Full access' administrator is able to see the shop owners user details"
10 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'rms'
b'List of devices is accessible regardless of the account limitations'
10 Nov 2015
b'Slack'
disclosed a bug submitted by
b'harry_mg'
b'Reflected Self-XSS in Slack'
10 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'brakhane'
b"'Limited' RCE in certain places where Liquid is accepted"
10 Nov 2015
b'Udemy'
disclosed a bug submitted by
b'robd4k'
b'XSS Vulnerability'
09 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'hazimaslam'
b'First & Last Name Disclosure of any Shopify Store Admin'
09 Nov 2015
b'ownCloud'
disclosed a bug submitted by
b'tomdev'
b'RCE in ci.owncloud.com / ci.owncloud.org'
09 Nov 2015
b'Python'
disclosed a bug submitted by
b'johnleitch'
b'PyFloat_FromString & PyNumber_Long Buffer Over-reads'
08 Nov 2015
b'Shopify'
disclosed a bug submitted by
b'hazimaslam'
b"Unauthorized access to any Store Admin's First & Last name"
07 Nov 2015
b'InVision'
disclosed a bug submitted by
b'mrrel'
b'Multiple Upload Vulnerability !File Upload + File Inclusion (Access Not Forbidden)'
06 Nov 2015
1
...
701
702
703
704
705
...
770
BY DENIS WERNER - @NOBBD -
IMPRESSUM