Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'HTML injection with AutoComplete suggestions'

10 Aug 2018

b'Starbucks' disclosed a bug submitted by b'0xpatrik' 
b'Subdomain takeover on wfmnarptpc.starbucks.com'

09 Aug 2018

b'RubyGems' disclosed a bug submitted by b'reed' 
b'Malware in `active-support` gem'

09 Aug 2018

b'Reverb.com' disclosed a bug submitted by b'm7mdharoun' 
b'Basic auth details is still work on report ( 351555 ) '

09 Aug 2018

b'HackerOne' disclosed a bug submitted by b'qwertyqwerty' 
b'TeamProfile exposes partially sensitive information through GraphQL'

08 Aug 2018

b'MyEtherWallet' disclosed a bug submitted by b'mrbean' 
b'Development configuration file https://myetherwallet.com/'

08 Aug 2018

b'Uber' disclosed a bug submitted by b'orange' 
b'Improper Access Control on Onelogin in multi-layered architecture'

08 Aug 2018

b'Discourse' disclosed a bug submitted by b'fransrosen' 
b'CSRF-tokens on pages without no-cache headers, resulting in ATO when using CloudFlare proxy (Web Cache Deception)'

08 Aug 2018

b'Cloudflare' disclosed a bug submitted by b'yox' 
b'Private API key leakage due to lack of access control'

08 Aug 2018

b'Vanilla' disclosed a bug submitted by b'tikoo_sahil' 
b'Able to Select Every Poll Option[http://tedwebers-famous-loudspeakers.vanillacommunities.com]'

08 Aug 2018

b'Brave Software' disclosed a bug submitted by b'kmodi' 
b'Cross domain tracking even with 3rd party cookies disabled.'

07 Aug 2018

b'Brave Software' disclosed a bug submitted by b'0ktavandi' 
b'OPEN REDIRECTION at every 302 HTTP CODE'

07 Aug 2018

b'Razer US' disclosed a bug submitted by b'gdinar' 
b'XSS on Saved Carts page'

07 Aug 2018

b'Razer US' disclosed a bug submitted by b'gdinar' 
b"Customer's e-mail disclosure"

07 Aug 2018

b'Shipt' disclosed a bug submitted by b'robd4k' 
b'Open redirect on marketing site'

07 Aug 2018

b'Monero' disclosed a bug submitted by b'anonimal' 
b'Constant-time comparison is not always implemented; critical areas are vulnerable to key-timing attacks'

06 Aug 2018

b'HackerOne' disclosed a bug submitted by b'suresh1c' 
b'Content spoofing and potential Cross-Site Scripting vulnerability on www.hackerone.com'

04 Aug 2018

b'Augur' disclosed a bug submitted by b'droblin' 
b'Augur UI data can be completely replaced by an attacker which can lead to fund and reputation loss '

04 Aug 2018

b'PullString' disclosed a bug submitted by b'ruvlol' 
b'Eternal "change password" link.'

04 Aug 2018

b'RubyGems' disclosed a bug submitted by b'plover' 
b'Gem signature forgery'

03 Aug 2018

1 ... 449 450 451 452 453 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM