Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'cablej' 
b'IDOR in activateFuelCard id allows bulk lookup of driver uuids'

25 Jan 2019

b'Uber' disclosed a bug submitted by b'ngalog' 
b'Open Redirect on central.uber.com allows for account takeover'

25 Jan 2019

b'Shopify' disclosed a bug submitted by b'emitrani' 
b'Bypass GraphQL rate limit by abusing negative cost queries'

24 Jan 2019

b'Sony' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a Sony WebSystem'

23 Jan 2019

b'Sony' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a Sony Pictures WebSystem'

23 Jan 2019

b'Valve' disclosed a bug submitted by b'milkgames' 
b"Deleting other people's comments on ModeratorMessages"

23 Jan 2019

b'Valve' disclosed a bug submitted by b'man_shum' 
b'unlock self-lock by brute force '

23 Jan 2019

b'Valve' disclosed a bug submitted by b'natetheriver' 
b'[help.steampowered.com] Account takeover bruteforcing SteamGuard'

23 Jan 2019

b'Starbucks' disclosed a bug submitted by b'apapedulimu' 
b'Missing CSRF Token On Add Coupon To Basket'

22 Jan 2019

b'Starbucks' disclosed a bug submitted by b'k3m' 
b'unuse domain still in using at wechat by Starbucks East China'

22 Jan 2019

b'Weblate' disclosed a bug submitted by b'elmahdi' 
b'No Rate On Add Suggest'

22 Jan 2019

b'Zomato' disclosed a bug submitted by b'sudi' 
b'[auth2.zomato.com] Reflected XSS at `oauth2/fallbacks/error` | ORY Hydra an OAuth 2.0 and OpenID Connect Provider'

21 Jan 2019

b'New Relic' disclosed a bug submitted by b'niwasaki' 
b'WordPress User Enumeration - blog.newrelic.com'

19 Jan 2019

b'Twitter' disclosed a bug submitted by b'nyuszika7h' 
b'Changing email address on Twitter for Android unsets "Protect your Tweets"'

18 Jan 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'websecnl' 
b'SOAP WSDL Parser SQL Code Execution'

16 Jan 2019

b'Dovecot' disclosed a bug submitted by b'mikki_khan' 
b'command Injection in rawlog binary'

16 Jan 2019

b'Mail.ru' disclosed a bug submitted by b'godexmachine' 
b'[online.games.mail.ru] - Sensitive information disclosure'

16 Jan 2019

b'Mail.ru' disclosed a bug submitted by b'godexmachine' 
b'[3k.mail.ru] - Content spoofing'

16 Jan 2019

b'Dropbox' disclosed a bug submitted by b'karlito' 
b'Disclose anonymous accessible link on embedded files in paper dropbox sessions'

15 Jan 2019

b'Weblate' disclosed a bug submitted by b'elmahdi' 
b'No Rate Limit On Add new word'

14 Jan 2019

1 ... 433 434 435 436 437 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM