Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Urban Dictionary' disclosed a bug submitted by b'flex0geek' 
b'Stored XSS on urbandictionary.com'

11 Jan 2018

b'OpenSSL (IBB)' disclosed a bug submitted by b'alex_gaynor' 
b'SSL_peek() hang on empty record (CVE-2016-6305)'

11 Jan 2018

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b'Partial disclosure of undisclosed programs through <meta> tags'

11 Jan 2018

b'shopify-scripts' disclosed a bug submitted by b'j0s3' 
b'mruby heredoc notation'

10 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[featurebook] Specification Server Directory Traversal via Crafted Browser Request'

10 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[serve-here] Static Web Server Directory Traversal via Crafted GET Request'

10 Jan 2018

b'RecargaPay' disclosed a bug submitted by b'cablej' 
b'IDOR exposes receipts of all users.'

10 Jan 2018

b'HackerOne' disclosed a bug submitted by b'hk755a' 
b'Missing Password Confirmation at a Critical Function (Payout Method)'

10 Jan 2018

b'Blockstack' disclosed a bug submitted by b'firestone' 
b'Cross site request forgery'

10 Jan 2018

b'Maximum' disclosed a bug submitted by b'firestone' 
b'Weak password '

10 Jan 2018

b'SEMrush' disclosed a bug submitted by b'0ways' 
b'subdomain takeover at news-static.semrush.com'

10 Jan 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'babayaga_' 
b'Stored XSS => community.ubnt.com '

10 Jan 2018

b'LocalTapiola' disclosed a bug submitted by b'teemuk' 
b'Reflected XSS Vulnerability in www.lahitapiola.fi/cs/Satellite'

10 Jan 2018

b'WePay' disclosed a bug submitted by b'ruvlol' 
b'open 80 port of internal host leaking some configuration info'

09 Jan 2018

b'OLX' disclosed a bug submitted by b'smii3' 
b'All Active user sessions should be destroyed when user change his password!'

08 Jan 2018

b'concrete5' disclosed a bug submitted by b'zuh4n' 
b'SSRF thru File Replace'

06 Jan 2018

b'Duolingo' disclosed a bug submitted by b'nightwatch-cybersecurity' 
b'RCE in TinyCards for Android'

04 Jan 2018

b'FormAssembly' disclosed a bug submitted by b'ramsexy' 
b'XSS in api_v1'

04 Jan 2018

b'Razer US' disclosed a bug submitted by b'syndr0me' 
b'CORS Misconfiguration leading to disclosure of access_token and account takeover!'

04 Jan 2018

b'Razer US' disclosed a bug submitted by b'karimrahal' 
b'Database credentials leak at http://drivers.razersupport.com/.bash_history'

04 Jan 2018

1 ... 472 473 474 475 476 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM