Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Smule' disclosed a bug submitted by b'assassin_marcos' 
b'Open Redirect on smule.com'

29 May 2019

b'Unikrn' disclosed a bug submitted by b'xb00ck' 
b'Full Path Disclosure'

29 May 2019

b'Urban Dictionary' disclosed a bug submitted by b'kittiesscript' 
b'Domain does not Match SSL Certificate'

29 May 2019

b'Twitter' disclosed a bug submitted by b'h1ch3ro' 
b'Subdomain takeover on dev-admin.periscope.tv'

28 May 2019

b'Shopify' disclosed a bug submitted by b'prial261' 
b'Reflected XSS '

28 May 2019

b'Shopify' disclosed a bug submitted by b'ashketchum' 
b'Stored - XSS'

28 May 2019

b'Automattic' disclosed a bug submitted by b'ajay_saycure' 
b'Wordpress VIP leaks email of the test a/c'

28 May 2019

b'Shopify' disclosed a bug submitted by b'masterhackor' 
b'Cross Site Scripting at https://app.oberlo.com/'

26 May 2019

b'TomTom' disclosed a bug submitted by b'daniel_v' 
b'Exposed Git Repo at http://betaforum.tomtom.com/.git/{subfolders}'

26 May 2019

b'Tron Foundation' disclosed a bug submitted by b'rhynorater' 
b'Private key "tron" leaked via Travis CI Log'

26 May 2019

b'Automattic' disclosed a bug submitted by b'foobar7' 
b'WooCommerce: Persistent XSS via customer address (state/county)'

26 May 2019

b'curl' disclosed a bug submitted by b'microsoftwindows29' 
b'Github wikis are editable by anyone #Githubwikistakeover'

25 May 2019

b'Twitter' disclosed a bug submitted by b'cy1337' 
b'HTTPS is not validating TLS mac codes'

25 May 2019

b'Khan Academy' disclosed a bug submitted by b'hanno' 
b'https://mathfacts.khanacademy.org/ includes code from unprivileged localhost port'

25 May 2019

b'Alliance of American Football ' disclosed a bug submitted by b'gujjuboy10x00' 
b'Stored xss in address field in billing activity at https://shop.aaf.com/Order/step1/index.cfm'

25 May 2019

b'Homebrew' disclosed a bug submitted by b'keeleysam' 
b'Homebrew installed LaunchDaemons create simple root esclations'

24 May 2019

b'Vanilla' disclosed a bug submitted by b'alb3r7' 
b'Stored XSS in vanilla'

24 May 2019

b'Valve' disclosed a bug submitted by b'njbooher' 
b'ISteamAssets gives partners control over unrelated community market transactions'

23 May 2019

b'GitLab' disclosed a bug submitted by b'iframe' 
b' The ability to pull out the domain and the mail part associated with the user account [gitter.im]'

22 May 2019

b'Shopify' disclosed a bug submitted by b'corb3nik' 
b'H1514 [*.(my)shopify.com] - Viewing Password Protected Content'

22 May 2019

1 ... 389 390 391 392 393 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM