Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Upserve ' disclosed a bug submitted by b'nitesculucian' 
b'Information disclosure through search engines (password reset token)'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'h3r0es' 
b'SSLv3 Poodle Attack on Ip Of semrush'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'walterhwhite' 
b'Broken Authentication: A project addition request can be used multiple time for different users'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'mrdoc' 
b'clickjacking to Semrush auth login'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'noxrnet' 
b'XXE in Site Audit function exposing file and directory contents'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'asad90' 
b'Cross-origin resource sharing misconfig '

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'whitehatmmalam' 
b'Security misconfiguration "weak passwords".'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'scraps' 
b'Insecure Direct Object Reference on API without API key'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'protector47' 
b'Email Spoofing'

13 Mar 2018

b'Mail.Ru' disclosed a bug submitted by b'ras-it' 
b'Stored XSS when you read eamils. <style>'

13 Mar 2018

b'Mail.Ru' disclosed a bug submitted by b'pisarenko' 
b'???????? ??????????????? ?? OpenID'

13 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'digitalwizard' 
b'[serve] Directory listing and File access even when they have been set to be ignored.'

13 Mar 2018

b'HackerOne' disclosed a bug submitted by b'firs0v' 
b'Can read features from any user'

12 Mar 2018

b'QIWI' disclosed a bug submitted by b'lincoln9932' 
b'https://fundl.qiwi.com CSRF ?? ????????????? sms '

11 Mar 2018

b'WordPress' disclosed a bug submitted by b'sniperpex' 
b'code.wordpress.net subdomain Takeover'

11 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[general-file-server] Path Traversal vulnerability allows to read content on arbitrary file on the server'

10 Mar 2018

b'HackerOne' disclosed a bug submitted by b'kunal94' 
b"Program profile_metrics.json contains time to triage for deptofdefense even it's turned off"

09 Mar 2018

b'Quora' disclosed a bug submitted by b'0xnan' 
b'XSS through `__e2e_action_id` delivered by JSONP'

08 Mar 2018

b'Nextcloud' disclosed a bug submitted by b'paulos_' 
b'Possible RCE'

08 Mar 2018

b'Twitter' disclosed a bug submitted by b'emitrani' 
b'CVE-2017-15277 on Profile page'

08 Mar 2018

1 ... 462 463 464 465 466 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM