Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Liberapay' disclosed a bug submitted by b'zir0x' 
b'Returning back from the browser after logging off will disclose some information'

07 Jun 2018

b'Vend' disclosed a bug submitted by b'stok' 
b'Race Condition : Exploiting the loyalty claim https://xxx.vendhq.com/loyalty/claim/email/xxxxx url and gain x amount of loyalty bonus/cash'

07 Jun 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Exposing hackerone users personally identifiable information by abusing sandbox with swag reward enabled'

07 Jun 2018

b'HackerOne' disclosed a bug submitted by b'herrera' 
b'Lack of cross-origin request blocking allows leaking of sensitive information on several endpoints'

07 Jun 2018

b'Tor' disclosed a bug submitted by b'metnew' 
b'Tor Browser: iframe with `data:` uri has access to parent window'

06 Jun 2018

b'Liberapay' disclosed a bug submitted by b'kapytein' 
b"Exploiting JSONP callback on /username/charts.json endpoint leads to information disclosure despite user's privacy settings"

05 Jun 2018

b'Liberapay' disclosed a bug submitted by b'zuh4n' 
b'Missing back-end user input validation can lead to DOS flaw'

05 Jun 2018

b'Liberapay' disclosed a bug submitted by b'wsfengfan474' 
b'Csrf token does not meet security design'

05 Jun 2018

b'Liberapay' disclosed a bug submitted by b'lahataleputih' 
b'REGISTRATION USING FAKE EMAIL ACCOUNT'

05 Jun 2018

b'Liberapay' disclosed a bug submitted by b'kapytein' 
b'Unsafe deserialization in Libera Pay allows to escalate a SQL injection to Remote Command Execution'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'mah1ndra' 
b'CSRF token manipulation in every possible form submits. NO server side Validation'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'buggy_hunter' 
b'csrf token did not changed after login/logout many times'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'nthack' 
b'Current CSP Policy chained with HTML Injection can lead to Data Exfiltration'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'4w3' 
b'Phishing by Navigating Browser Tabs'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'lahataleputih' 
b'CSRF ON EDITING NAME (OPTIONAL)'

04 Jun 2018

b'Liberapay' disclosed a bug submitted by b'hack2684' 
b'Insecure Account Deletion'

04 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'inet_freedom' 
b' Local paths disclosure through error message'

04 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'lincoln9932' 
b'lootdog.io XSS'

04 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'danila_xawdxawdx' 
b'Blind Stored XSS'

04 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'danila_xawdxawdx' 
b'Partner Account Takeover on https://www.delivery-club.ru ????? ???????????????? ???????.'

04 Jun 2018

1 ... 410 411 412 413 414 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM