Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'3thic4l' 
b'A user can request a report to be retested even though the program has not been verified by HackerOne'

27 Dec 2018

b'FormAssembly' disclosed a bug submitted by b'stfloresca' 
b'xmlrpc.php file is enable it will used for (DOS) and bruteforce attack'

27 Dec 2018

b'OLX' disclosed a bug submitted by b'hdbreaker' 
b'blog.praca.olx.pl database credentials exposure'

26 Dec 2018

b'Avito' disclosed a bug submitted by b'kxyry' 
b'[avito.ru] ??????? ????? ?? ????????? ???????????'

24 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'shrey3' 
b'Open Directory'

24 Dec 2018

b'Kaspersky Lab' disclosed a bug submitted by b'palant' 
b'Kaspersky Password Manager: HTML injection in the browser action pop-up via user name'

24 Dec 2018

b'Flash (IBB)' disclosed a bug submitted by b'kinine' 
b'HTTP MitM on Flash Player settings manager allows attacker to set sandbox settings'

23 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamad_iheb' 
b'Server Header disclose The Os and Web server Version '

22 Dec 2018

b'HackerOne' disclosed a bug submitted by b'albinowax' 
b'Denial of service via cache poisoning'

22 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'yasinylcn17' 
b'Hackerone1'

21 Dec 2018

b'FanDuel' disclosed a bug submitted by b'mobius07' 
b'Passive mixed content issues on the site https://*.fanduel.com'

21 Dec 2018

b'SEMrush' disclosed a bug submitted by b'saya' 
b'User Controllable Cookie'

21 Dec 2018

b'Starbucks' disclosed a bug submitted by b'ozzyoz' 
b'Able to bypass information requirements before launching a Chat.'

20 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamad_iheb' 
b'Editable Wiki repo by anyone '

20 Dec 2018

b'Uber' disclosed a bug submitted by b'vijay_kumar1110' 
b'IDOR on partners.uber.com allows for a driver to override administrator documents'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'reptou' 
b'XSS in ubermovement.com via editable Google Sheets'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'hussain_0x3c' 
b'Reflected XSS in lert.uber.com'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'hanuman1' 
b'SMS URL verification link does not expire on phone number change and lacks rate limiting'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'vijay_kumar1110' 
b'Site-wide CSRF on eats.uber.com'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'filedescryptor' 
b'lert.uber.com: Few default folders/files of AURA Framework are accessible'

19 Dec 2018

1 ... 414 415 416 417 418 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM