Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'corb3nik' 
b'H1514 [*.(my)shopify.com] - Viewing Password Protected Content'

22 May 2019

b'Starbucks' disclosed a bug submitted by b'wa1m3im' 
b'Reflected XSS in https://www.starbucks.co.jp/store/search/'

22 May 2019

b'Starbucks' disclosed a bug submitted by b'0xpatrik' 
b'Subdomain takeover of mydailydev.starbucks.com'

22 May 2019

b'Grammarly' disclosed a bug submitted by b'karimpwnz' 
b"Employee's GitHub Token Found In Travis CI Build Logs"

22 May 2019

b'Revive Adserver' disclosed a bug submitted by b'paulos_' 
b'Authentication Bypass by abusing Insecure crypto tokens in /lib/OA/Dal/PasswordRecovery.php:'

21 May 2019

b'Tor' disclosed a bug submitted by b'xiaoyinl' 
b'Detecting Tor Browser UI Language'

21 May 2019

b'ok.ru' disclosed a bug submitted by b'linkks' 
b'Cisco ASA Denial of Service & Path Traversal (CVE-2018-0296)'

20 May 2019

b'HackerOne' disclosed a bug submitted by b'flashdisk' 
b'Race condition in claiming program credentials '

19 May 2019

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'API Last Request Date/Time Not Updating'

19 May 2019

b'ZEIT' disclosed a bug submitted by b'elmahdi' 
b'CSRF On Connect Account With Github Lead To Account Takeover'

19 May 2019

b'HackerOne' disclosed a bug submitted by b'fixit' 
b'Banned researcher gets email updates on a private program.'

18 May 2019

b'RATELIMITED' disclosed a bug submitted by b'daniel_v' 
b'Unrestricted File Upload on https://auth.ratelimited.me'

18 May 2019

b'Zendesk' disclosed a bug submitted by b'trimatra-sec' 
b'Blind XSS via Suspended Ticket Recovery'

17 May 2019

b'Twitter' disclosed a bug submitted by b'nyuszika7h' 
b'Protected Tweets setting overridden by Android app'

17 May 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'benchmark metrics available at 5.61.239.154'

17 May 2019

b'Khan Academy' disclosed a bug submitted by b'tomoh' 
b'Take over of accounts created using Google or Facebook'

17 May 2019

b'Khan Academy' disclosed a bug submitted by b'tomoh' 
b'Account takeover by changing email'

17 May 2019

b'Twitter' disclosed a bug submitted by b'terjanq' 
b'Twitter ID exposure via error-based side-channel attack'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'mik317' 
b'[Fix Bypass #541631] Open redirect on Signup'

16 May 2019

b'ZEIT' disclosed a bug submitted by b'elmahdi' 
b'Reflected DOM-Based XSS On Due Lack Filter On Parameter ?next'

16 May 2019

1 ... 404 405 406 407 408 ... 744

BY DENIS WERNER - @NOBBD - IMPRESSUM