Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Redtube' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS in galleries - https://www.redtube.com/gallery/[id] path'

10 Oct 2018

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Unauthenticated user can upload an attachment to the last updated report draft'

09 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'Navigation to restricted origins via "Open in new tab"'

09 Oct 2018

b'Infogram' disclosed a bug submitted by b'the_legend' 
b'possibility to create account without username'

09 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'cunn' 
b'No rate limiting in changing room subject.'

09 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'cunn' 
b'No rate limiting in starting up a bot.'

09 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'kaustubh' 
b'Missing CSRF Protection in /stats EndPoint.'

09 Oct 2018

b'Snapchat' disclosed a bug submitted by b'th3g3nt3lman' 
b'Github Token Leaked publicly for https://github.sc-corp.net'

08 Oct 2018

b'Infogram' disclosed a bug submitted by b'boxpy' 
b'CORS on (ws.infogram.com)'

08 Oct 2018

b'VK.com' disclosed a bug submitted by b'povargek' 
b'????????? ??????? ??????? ? Long Pool ? ????????????? ???????? ?????, ???? ?? ?????-???? ???? ?? ???????? ??????'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'lucach' 
b'Unrestricted POST request size on roomlogin endpoint'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'footstep' 
b'Missing Rate Limitation at /apps/upload_app/ '

07 Oct 2018

b'Snapchat' disclosed a bug submitted by b'malcolmx' 
b'Domain Takeover in [obviousengine.com] a snapchat acquisitions'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'avinash_' 
b'CSRF on change video thumbnail at https://chaturbate.com'

07 Oct 2018

b'Badoo' disclosed a bug submitted by b'jarvis7' 
b'Compromising the user ID'

07 Oct 2018

b'ICQ' disclosed a bug submitted by b'ruvlol' 
b'easyXDM allows cross domain postmessaging with any origin, leaking sensitive info'

05 Oct 2018

b'Django' disclosed a bug submitted by b'greenwolf' 
b'Email Spoofing Possible on djangoproject.com Email Domain'

05 Oct 2018

b'Zomato' disclosed a bug submitted by b'areizen' 
b'Reflected XSS on developers.zomato.com'

05 Oct 2018

b'Shopify' disclosed a bug submitted by b'zhurig' 
b'Race condition at create new Location'

05 Oct 2018

b'Uber' disclosed a bug submitted by b'0x0luke' 
b'XSS on partners.uber.com due to no user input sanitisation '

04 Oct 2018

1 ... 433 434 435 436 437 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM