Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Khan Academy' disclosed a bug submitted by b'tomoh' 
b'Take over of accounts created using Google or Facebook'

17 May 2019

b'Khan Academy' disclosed a bug submitted by b'tomoh' 
b'Account takeover by changing email'

17 May 2019

b'Twitter' disclosed a bug submitted by b'terjanq' 
b'Twitter ID exposure via error-based side-channel attack'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'mik317' 
b'[Fix Bypass #541631] Open redirect on Signup'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'elmahdi' 
b'Reflected DOM-Based XSS On Due Lack Filter On Parameter ?next'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'sohelahmed786' 
b'Stored XSS in profile page'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'elcaesar' 
b'Stored Cross-site scripting '

16 May 2019

b'Chaturbate' disclosed a bug submitted by b'whitehattushu' 
b'The auto login link does not expire on changing email id'

16 May 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'URL redirection'

16 May 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'??? ?????? '

16 May 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'XSS '

16 May 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'Reference to external uncontrolled resource in terrhq.ru'

16 May 2019

b'Django' disclosed a bug submitted by b'j3ssie' 
b'Jenkins Unauthenticated RCE on https://djangoci.com/'

16 May 2019

b'WordPress' disclosed a bug submitted by b'simonscannell' 
b'CSRF to HTML Injection in Comments'

13 May 2019

b'GitLab' disclosed a bug submitted by b'8ayac' 
b'DoS on the Issue page by exploiting Mermaid.'

13 May 2019

b'Dropbox' disclosed a bug submitted by b'pikamander2' 
b'Forum posts and private messages are poorly sanitized, allowing execution of arbitrary JavaScript'

13 May 2019

b'Smule' disclosed a bug submitted by b'dhakalananda' 
b'Missing Rate Limit in Forgot Password can Lead to email address leakage of all smule accounts'

13 May 2019

b'Mail.ru' disclosed a bug submitted by b'mehulpanchal007' 
b'CSRF on /subscription_manage.php endpoint at allods.mail.ru'

13 May 2019

b'Mail.ru' disclosed a bug submitted by b'stealthy' 
b'Seven DOM-Based XSS Vulnerabilities | Execution in Login Sequence'

13 May 2019

b'Shopify' disclosed a bug submitted by b'3rd4l' 
b'help.shopify.com Cross Site Scripting'

12 May 2019

1 ... 399 400 401 402 403 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM