Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Infogram' disclosed a bug submitted by b'boxpy' 
b'CORS on (ws.infogram.com)'

08 Oct 2018

b'VK.com' disclosed a bug submitted by b'povargek' 
b'????????? ??????? ??????? ? Long Pool ? ????????????? ???????? ?????, ???? ?? ?????-???? ???? ?? ???????? ??????'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'lucach' 
b'Unrestricted POST request size on roomlogin endpoint'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'footstep' 
b'Missing Rate Limitation at /apps/upload_app/ '

07 Oct 2018

b'Snapchat' disclosed a bug submitted by b'malcolmx' 
b'Domain Takeover in [obviousengine.com] a snapchat acquisitions'

07 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'avinash_' 
b'CSRF on change video thumbnail at https://chaturbate.com'

07 Oct 2018

b'Badoo' disclosed a bug submitted by b'jarvis7' 
b'Compromising the user ID'

07 Oct 2018

b'ICQ' disclosed a bug submitted by b'ruvlol' 
b'easyXDM allows cross domain postmessaging with any origin, leaking sensitive info'

05 Oct 2018

b'Django' disclosed a bug submitted by b'greenwolf' 
b'Email Spoofing Possible on djangoproject.com Email Domain'

05 Oct 2018

b'Zomato' disclosed a bug submitted by b'areizen' 
b'Reflected XSS on developers.zomato.com'

05 Oct 2018

b'Shopify' disclosed a bug submitted by b'zhurig' 
b'Race condition at create new Location'

05 Oct 2018

b'Uber' disclosed a bug submitted by b'0x0luke' 
b'XSS on partners.uber.com due to no user input sanitisation '

04 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'mase289' 
b'Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.com'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'`settingcontent-ms` files lacks "mark of the web" => execute code by dbl click in Downloads toolbar'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'Cross-origin page stays focused before/after downloading + uninformative modal window for download'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'`alert()` dialogs on `chrome-extension://` origin (internal pages)'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'URL spoofing using protocol handlers'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'URL spoofing in Brave for macOS'

04 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'pisarenko' 
b'?????????? ????? ??? ? ????????? ???????????? !'

03 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'saiyajin' 
b'XSS in touch.mail.ru '

02 Oct 2018

1 ... 437 438 439 440 441 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM