Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'QIWI' disclosed a bug submitted by b'tsug0d' 
b'apache access.log leakage via long request on https://rapida.ru/'

05 Feb 2018

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'severus' 
b'Leak ?????????? information in real time through API request'

03 Feb 2018

b'WordPress' disclosed a bug submitted by b'abdullah' 
b'Stored XSS in WordPress'

02 Feb 2018

b'HackerOne' disclosed a bug submitted by b'aidantwoods' 
b'Reputation gain split by company can be used to track the existence of otherwise undisclosed reports'

02 Feb 2018

b'Kaspersky Lab' disclosed a bug submitted by b'ashishag29' 
b'Keys'

02 Feb 2018

b'Zomato' disclosed a bug submitted by b'samengmg' 
b'[https://reviews.zomato.com] Time Based SQL Injection'

02 Feb 2018

b'GitLab' disclosed a bug submitted by b'bnchandrapal' 
b'Lack of validation before assigning custom domain names leading to abuse of GitLab pages service'

01 Feb 2018

b'Trello' disclosed a bug submitted by b'codarren' 
b'Trello Gold accounts free for 1 year'

01 Feb 2018

b'Legal Robot' disclosed a bug submitted by b'closer' 
b'Header Injection In app.legalrobot.com'

01 Feb 2018

b'Legal Robot' disclosed a bug submitted by b'closer' 
b'Add arbitrary value in reset password cookie'

01 Feb 2018

b'WordPress' disclosed a bug submitted by b'kazan71p' 
b'[support.wordcamp.org] - publicly accessible .svn repository'

01 Feb 2018

b'HackerOne' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b"Updating payout preference to CurrencyCloud doesn't notify user via email"

31 Jan 2018

b'Weblate' disclosed a bug submitted by b'pk21' 
b'DNSSEC Zone Walk using NSEC Records'

30 Jan 2018

b'VK.com' disclosed a bug submitted by b'umfc' 
b'????????? ??????? ????????? ?????? ? ???????'

30 Jan 2018

b'HackerOne' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Domain spoofing in redirect page using RTLO'

30 Jan 2018

b'HackerOne' disclosed a bug submitted by b'ahmed_anwer_mohamed' 
b'Markdown parsing issue enables insertion of malicious tags and event handlers'

29 Jan 2018

b'Infogram' disclosed a bug submitted by b'saikiran-10099' 
b'Email notification is not being sent while changing passwords'

29 Jan 2018

b'RBKmoney' disclosed a bug submitted by b'uranium238' 
b'IDOR in merchant.rbmonkey.com allows deleting eShops of another user'

29 Jan 2018

b'RBKmoney' disclosed a bug submitted by b'bhenner__' 
b'Information Disclosure - Composer.lock'

29 Jan 2018

b'RBKmoney' disclosed a bug submitted by b'arifkhan' 
b'Text manipulation in https://checkout.rbk.money'

29 Jan 2018

1 ... 479 480 481 482 483 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM