Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'??????' disclosed a bug submitted by b'cdl' 
b'Phone Call to XXE via Interactive Voice Response'

15 Aug 2018

b'Shopify' disclosed a bug submitted by b'shahzad__sadiq' 
b'Stored XSS on activity'

14 Aug 2018

b'SEMrush' disclosed a bug submitted by b'ethical_hacker30121996' 
b'Password reset token leakage via referer'

14 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'danny_grander' 
b'Arbitrary File Write through archive extraction'

12 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'danny_grander' 
b'Arbitrary File Write Through Archive Extraction'

12 Aug 2018

b'Ed' disclosed a bug submitted by b'glassofbeer' 
b'Physical Laptop Takeover'

12 Aug 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Private program policy page still accessible after user left the program'

12 Aug 2018

b'Passit' disclosed a bug submitted by b'alpha66' 
b'Session not changed after password reset'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'paramdham' 
b'Authentication Required When password change '

11 Aug 2018

b'Passit' disclosed a bug submitted by b'muon4' 
b'app.passit.io is vulnerable against Brute Force password quessing attack'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'saneh' 
b'Authorization Token is Not expiring After Logout'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'alpha66' 
b'Insecure Account Removal'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'alpha66' 
b'Weak Password Policy on Signup'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'exception' 
b' `X-XSS-Protection` header has not been set at app.passit.io'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'ketankumar_godhani' 
b'Missing HSTS (Strict Transport Security)'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'kevinhwang' 
b'Insecure opening of external links in app.passit.io/list allows for reverse tabnabbing'

11 Aug 2018

b'Passit' disclosed a bug submitted by b'muon4' 
b'CSV-injection in export functionality'

11 Aug 2018

b'Homebrew' disclosed a bug submitted by b'ejholmes' 
b'GitHub API Key for BrewTestBot is publicly exposed'

11 Aug 2018

b'Razer US' disclosed a bug submitted by b'wiardvanrij' 
b'Admin login page reveals user account - no anti-bruteforce'

10 Aug 2018

b'Hacker Target' disclosed a bug submitted by b'cdl' 
b'Sending Emails from DNSDumpster - Server-Side Request Forgery to Internal SMTP Access'

10 Aug 2018

1 ... 482 483 484 485 486 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM