Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'FanDuel' disclosed a bug submitted by b'mobius07' 
b'Passive mixed content issues on the site https://*.fanduel.com'

21 Dec 2018

b'SEMrush' disclosed a bug submitted by b'saya' 
b'User Controllable Cookie'

21 Dec 2018

b'Starbucks' disclosed a bug submitted by b'ozzyoz' 
b'Able to bypass information requirements before launching a Chat.'

20 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamad_iheb' 
b'Editable Wiki repo by anyone '

20 Dec 2018

b'Uber' disclosed a bug submitted by b'vijay_kumar1110' 
b'IDOR on partners.uber.com allows for a driver to override administrator documents'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'reptou' 
b'XSS in ubermovement.com via editable Google Sheets'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'hussain_0x3c' 
b'Reflected XSS in lert.uber.com'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'hanuman1' 
b'SMS URL verification link does not expire on phone number change and lacks rate limiting'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'vijay_kumar1110' 
b'Site-wide CSRF on eats.uber.com'

19 Dec 2018

b'Uber' disclosed a bug submitted by b'filedescryptor' 
b'lert.uber.com: Few default folders/files of AURA Framework are accessible'

19 Dec 2018

b'Keybase' disclosed a bug submitted by b'mirchr' 
b'Linux privilege escalation via trusted $PATH in keybase-redirector '

18 Dec 2018

b'Keybase' disclosed a bug submitted by b'xpn' 
b'Privilege Escalation via Keybase Helper'

18 Dec 2018

b'Nextcloud' disclosed a bug submitted by b'ezkbd' 
b'Ubuntu 12.04 Privilege Escalation'

18 Dec 2018

b'OLX' disclosed a bug submitted by b'lukeberner' 
b"Able to list user's public name, username, phone number, address, facebook ID..."

17 Dec 2018

b'MyCrypto' disclosed a bug submitted by b'shantuman' 
b'SPF Records (SMTP protection not used)'

17 Dec 2018

b'Brave Software' disclosed a bug submitted by b'mushicious' 
b'Field Day With Protocol Handlers'

17 Dec 2018

b'YouPorn' disclosed a bug submitted by b'prakharprasad' 
b'Add a video to favourite list of any user [via YouPorn API / FrontEnd]'

17 Dec 2018

b'Node.js third-party modules' disclosed a bug submitted by b'dienpv' 
b'Prototype pollution attack (lutils-merge)'

17 Dec 2018

b'OLX' disclosed a bug submitted by b'pajoda' 
b'Search Page Reflected XSS on sharjah.dubizzle.com through unencoded output of GET parameter in JavaScript'

16 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'whoami021' 
b'Apache Version Disclosure Through Directory Indexing'

15 Dec 2018

1 ... 433 434 435 436 437 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM