Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LocalTapiola' disclosed a bug submitted by b'tonsku' 
b'Possible sweet32 lahitapiola.fi'

13 Dec 2017

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards' 
b'Single User DOS on SelectedLocale -cookie (verkkopalvelu.tapiola.fi)'

13 Dec 2017

b'Infogram' disclosed a bug submitted by b'saikiran-10099' 
b'No Rate Limit on account deletion request(Leads to huge email flooding/email bombing)'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b't-pwn' 
b'Bruteforcing Coupons'

12 Dec 2017

b'The Internet' disclosed a bug submitted by b'pwnsdx' 
b'Unsecure: Bypass alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools)'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'mksecurity' 
b'Non Critical Code Quality Bug / Self XSS on Map Editor'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'blackpanther_akaash' 
b'No Rate limit on Password Reset Function'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'zubair' 
b'Javascript Payload reflected Back in Report Embed Code'

12 Dec 2017

b'HackerOne' disclosed a bug submitted by b'wh47' 
b'Content Security Policy not applied to error pages at multiple HackerOne endpoints'

12 Dec 2017

b'WordPress' disclosed a bug submitted by b'morningstar' 
b'Stored xss via template injection'

11 Dec 2017

b'Infogram' disclosed a bug submitted by b'muon4' 
b'New team invitation functionality allows extend team without upgrade'

11 Dec 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'dblack' 
b'Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.'

11 Dec 2017

b'Perl (IBB)' disclosed a bug submitted by b'mipu94' 
b'Interger overflow in eval trigger write out of bound'

11 Dec 2017

b'Infogram' disclosed a bug submitted by b'mksecurity' 
b'Report Design Critical Stored DOM XSS Vulnerability '

08 Dec 2017

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'Bypass of my two other reports #267636 + #255894 - (IDOR) Ability to see full name associated with other New Relic accounts'

07 Dec 2017

b'HackerOne' disclosed a bug submitted by b'cjlegacion' 
b'Able To Check The Exact Bounty Balance of any Bug Bounty Program'

06 Dec 2017

b'Trello' disclosed a bug submitted by b'nohack' 
b'Sessions Token In Get Parameter Request Initiating Websocket Connection'

06 Dec 2017

b'Infogram' disclosed a bug submitted by b'mrreboot' 
b'Server Side Request Forgery on JSON Feed'

06 Dec 2017

b'Monero' disclosed a bug submitted by b'aerodudrizzt' 
b'Kovri: potential buffer over-read in garlic clove handling + I2NP message creation'

05 Dec 2017

b'Starbucks' disclosed a bug submitted by b'benoculars' 
b'Multiple Subdomain takeovers via unclaimed instances'

04 Dec 2017

1 ... 477 478 479 480 481 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM