Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[id.rapida.ru] Full Path Disclosure'

18 Nov 2018

b'Discourse' disclosed a bug submitted by b'bobrov' 
b'Web Cache Deception Attack (XSS)'

18 Nov 2018

b'Vanilla' disclosed a bug submitted by b'bobrov' 
b'[allhiphop.vanillacommunities.com] XSS Request-URI'

18 Nov 2018

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[*.rocketbank.ru] Web Cache Deception & XSS'

18 Nov 2018

b'WordPress' disclosed a bug submitted by b'opnsec' 
b'Multiple stored XSS in WordPress'

16 Nov 2018

b'Casper' disclosed a bug submitted by b'mobius07' 
b'Mixed content issues on the site https://casper.com'

16 Nov 2018

b'HackerOne' disclosed a bug submitted by b'npbhatter17' 
b'Accidental Access to Programs Information via SAML Login'

14 Nov 2018

b'MariaDB' disclosed a bug submitted by b'dhiraj-mishra' 
b'Incorrect Permission Assignment for Critical Resource'

14 Nov 2018

b'Uber' disclosed a bug submitted by b'fady_othman' 
b'Reflected XSS on multiple uberinternal.com domains'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'fady_othman' 
b'Reflected XSS in https://eng.uberinternal.com and https://coeshift.corp.uber.internal/'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'nightwatch-cybersecurity' 
b'Privacy policy contains hardcoded link using unencrypted HTTP'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'mdv' 
b'Possibility to inject a malicious JavaScript code in any file on tags.tiqcdn.com results in a stored XSS on any page in most Uber domains'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'4lemon' 
b'Open redirect on rush.uber.com, business.uber.com, and help.uber.com'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'indcyberjoker' 
b'SMS/Call spamming due to truncated phone number'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'djangohack' 
b'Delay of arrears notification allows Riders to take multiple rides without paying'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'cablej' 
b'No rate limiting on https://biz.uber.com/confirm allowed an attacker to join arbitrary business.uber.com accounts'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'nullelite' 
b'Hack The World 2017 Top 2 Bonus'

13 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'nuke11' 
b'Multiple Bugs in api.data.gov/signup endpoint leads to send custom messages to Anyone'

13 Nov 2018

b'Shopify' disclosed a bug submitted by b'dr_dragon' 
b'Reflected XSS on $Any$.myshopify.com/admin'

13 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'danila_xawdxawdx' 
b'Shell upload in partner service'

13 Nov 2018

1 ... 416 417 418 419 420 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM