Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ian Dunn' disclosed a bug submitted by b'whitehat_hacker' 
b"Security issue: Github repo's wiki publicly editable"

12 Dec 2018

b'Shopify' disclosed a bug submitted by b'dr_dragon' 
b'Bypass Filter and get Stored Xss '

12 Dec 2018

b'HackerOne' disclosed a bug submitted by b'mik317' 
b'GitHub users outside of HackerOne organization can create and update Wiki pages of certain public HackerOne repositories'

12 Dec 2018

b'VK.com' disclosed a bug submitted by b'executor' 
b'???????????? ??? + ????????? ?????????? ??????? ? ???????? ????? ?????? ??????'

12 Dec 2018

b'Twitter' disclosed a bug submitted by b'csanuragjain' 
b'Opportunity to post hidden comments'

11 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamzamandil' 
b'Banner Grabbing - Apache Server Version Disclousure'

11 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hamzamn2098' 
b' information disclosure which leak the apache version '

11 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'hach3ro' 
b'HTTP PUT method enabled'

11 Dec 2018

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Inline banner on Report page discloses whether organization runs a private program'

11 Dec 2018

b'RubyGems' disclosed a bug submitted by b'plover' 
b'DNS SRV lookup of file:// sources enables local hijacking of gems'

11 Dec 2018

b'RATELIMITED' disclosed a bug submitted by b'emitrani' 
b'HTTP PUT method enabled'

11 Dec 2018

b'Twitter' disclosed a bug submitted by b'nahoragg' 
b'CORS misconfig | Account Takeover'

10 Dec 2018

b'RubyGems' disclosed a bug submitted by b'mrunal' 
b'Cross-Domain JavaScript Source File Inclusion '

10 Dec 2018

b'QIWI' disclosed a bug submitted by b'igorpyan' 
b'??????????? ??????????? ?? ????? qiwi.com ?? ????? ????? ????????'

10 Dec 2018

b'MariaDB' disclosed a bug submitted by b'c0rv4x' 
b'Github wiki is editable by anyone'

10 Dec 2018

b'RubyGems' disclosed a bug submitted by b'claudijd' 
b'Request Hijacking Vulnerability in RubyGems 2.6.13 and earlier'

08 Dec 2018

b'RubyGems' disclosed a bug submitted by b'ooooooo_q' 
b'65534 times efficient, Brute-force attack for api_key'

08 Dec 2018

b'OLX' disclosed a bug submitted by b'secpentester1337' 
b'XSS Reflected at SEARCH >>'

08 Dec 2018

b'Khan Academy' disclosed a bug submitted by b'sarmadkhan' 
b'Cross site scripting (content-sniffing)'

08 Dec 2018

b'Nextcloud' disclosed a bug submitted by b'c0rv4x' 
b'Github wikis are editable by anyone '

07 Dec 2018

1 ... 438 439 440 441 442 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM