Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Coinbase' disclosed a bug submitted by b'vicompany' 
b'Ethereum account balance manipulation'

21 Mar 2018

b'SEMrush' disclosed a bug submitted by b'asad90' 
b' CORS (Cross-Origin Resource Sharing)'

20 Mar 2018

b'MyCrypto' disclosed a bug submitted by b'bigshaq' 
b'DOM Based XSS in mycrypto.com'

18 Mar 2018

b'Monero' disclosed a bug submitted by b'c4c1234757b4f1e468a29d480d78f2' 
b'Monero GUI not linked with /DYNAMICBASE or hardening on windows, no ASLR'

18 Mar 2018

b'Cloudflare' disclosed a bug submitted by b'veggie' 
b'// (double slash) inside es6 template literals interpreted as an inline comment by the auto-minifier'

17 Mar 2018

b'Discourse' disclosed a bug submitted by b'mishre' 
b'Gaining access to private topics using quoting feature'

17 Mar 2018

b'Monero' disclosed a bug submitted by b'monero-hax123' 
b'Corrupt RPC responses from remote daemon nodes can lead to transaction tracing'

16 Mar 2018

b'MyCrypto' disclosed a bug submitted by b'w2w' 
b'Html injection mycrypto.com'

16 Mar 2018

b'HackerOne' disclosed a bug submitted by b'e333jsjs7se' 
b'Leakage badges on disabled user'

15 Mar 2018

b'Legal Robot' disclosed a bug submitted by b'code' 
b'https://www.legalrobot.com/'

14 Mar 2018

b'HackerOne' disclosed a bug submitted by b'kapytein' 
b'HTTP Parameter Pollution using semicolons in iframe element at hackerone.com/careers allows loading external Greenhouse forms'

13 Mar 2018

b'Upserve ' disclosed a bug submitted by b'nitesculucian' 
b'Information disclosure through search engines (password reset token)'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'h3r0es' 
b'SSLv3 Poodle Attack on Ip Of semrush'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'walterhwhite' 
b'Broken Authentication: A project addition request can be used multiple time for different users'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'mrdoc' 
b'clickjacking to Semrush auth login'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'noxrnet' 
b'XXE in Site Audit function exposing file and directory contents'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'asad90' 
b'Cross-origin resource sharing misconfig '

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'whitehatmmalam' 
b'Security misconfiguration "weak passwords".'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'scraps' 
b'Insecure Direct Object Reference on API without API key'

13 Mar 2018

b'SEMrush' disclosed a bug submitted by b'protector47' 
b'Email Spoofing'

13 Mar 2018

1 ... 472 473 474 475 476 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM