Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[sms.qiwi.ru] XSS via Request-URI'

18 Nov 2018

b'WePay' disclosed a bug submitted by b'bobrov' 
b'[stage-go.wepay.com] XSS via Request URI'

18 Nov 2018

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[vitrina.contact-sys.com] Full Path Disclosure'

18 Nov 2018

b'Sucuri' disclosed a bug submitted by b'bobrov' 
b'[backups*.sucuri.net] CRLF Injection'

18 Nov 2018

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[id.rapida.ru] Full Path Disclosure'

18 Nov 2018

b'Discourse' disclosed a bug submitted by b'bobrov' 
b'Web Cache Deception Attack (XSS)'

18 Nov 2018

b'Vanilla' disclosed a bug submitted by b'bobrov' 
b'[allhiphop.vanillacommunities.com] XSS Request-URI'

18 Nov 2018

b'QIWI' disclosed a bug submitted by b'bobrov' 
b'[*.rocketbank.ru] Web Cache Deception & XSS'

18 Nov 2018

b'WordPress' disclosed a bug submitted by b'opnsec' 
b'Multiple stored XSS in WordPress'

16 Nov 2018

b'Casper' disclosed a bug submitted by b'mobius07' 
b'Mixed content issues on the site https://casper.com'

16 Nov 2018

b'HackerOne' disclosed a bug submitted by b'npbhatter17' 
b'Accidental Access to Programs Information via SAML Login'

14 Nov 2018

b'MariaDB' disclosed a bug submitted by b'dhiraj-mishra' 
b'Incorrect Permission Assignment for Critical Resource'

14 Nov 2018

b'Uber' disclosed a bug submitted by b'fady_othman' 
b'Reflected XSS on multiple uberinternal.com domains'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'fady_othman' 
b'Reflected XSS in https://eng.uberinternal.com and https://coeshift.corp.uber.internal/'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'nightwatch-cybersecurity' 
b'Privacy policy contains hardcoded link using unencrypted HTTP'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'mdv' 
b'Possibility to inject a malicious JavaScript code in any file on tags.tiqcdn.com results in a stored XSS on any page in most Uber domains'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'4lemon' 
b'Open redirect on rush.uber.com, business.uber.com, and help.uber.com'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'indcyberjoker' 
b'SMS/Call spamming due to truncated phone number'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'djangohack' 
b'Delay of arrears notification allows Riders to take multiple rides without paying'

13 Nov 2018

b'Uber' disclosed a bug submitted by b'cablej' 
b'No rate limiting on https://biz.uber.com/confirm allowed an attacker to join arbitrary business.uber.com accounts'

13 Nov 2018

1 ... 442 443 444 445 446 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM