Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Blockstack' disclosed a bug submitted by b'firestone' 
b'Cross site request forgery'

10 Jan 2018

b'Maximum' disclosed a bug submitted by b'firestone' 
b'Weak password '

10 Jan 2018

b'SEMrush' disclosed a bug submitted by b'0ways' 
b'subdomain takeover at news-static.semrush.com'

10 Jan 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'babayaga_' 
b'Stored XSS => community.ubnt.com '

10 Jan 2018

b'LocalTapiola' disclosed a bug submitted by b'teemuk' 
b'Reflected XSS Vulnerability in www.lahitapiola.fi/cs/Satellite'

10 Jan 2018

b'WePay' disclosed a bug submitted by b'ruvlol' 
b'open 80 port of internal host leaking some configuration info'

09 Jan 2018

b'OLX' disclosed a bug submitted by b'smii3' 
b'All Active user sessions should be destroyed when user change his password!'

08 Jan 2018

b'concrete5' disclosed a bug submitted by b'zuh4n' 
b'SSRF thru File Replace'

06 Jan 2018

b'Duolingo' disclosed a bug submitted by b'nightwatch-cybersecurity' 
b'RCE in TinyCards for Android'

04 Jan 2018

b'FormAssembly' disclosed a bug submitted by b'ramsexy' 
b'XSS in api_v1'

04 Jan 2018

b'Razer US' disclosed a bug submitted by b'syndr0me' 
b'CORS Misconfiguration leading to disclosure of access_token and account takeover!'

04 Jan 2018

b'Razer US' disclosed a bug submitted by b'karimrahal' 
b'Database credentials leak at http://drivers.razersupport.com/.bash_history'

04 Jan 2018

b'Razer US' disclosed a bug submitted by b'surfrdan' 
b'SQL Injection on careers.razerzone.com within the Admin interface without any access credentials'

04 Jan 2018

b'Twitter' disclosed a bug submitted by b'avinash_' 
b'Improper Host Detection During Team Up on tweetdeck.twitter.com'

04 Jan 2018

b'Trello' disclosed a bug submitted by b'mido_ch' 
b'Subdomain Takeover Possible'

03 Jan 2018

b'Trello' disclosed a bug submitted by b'mido_ch' 
b'CSV injection'

03 Jan 2018

b'Trello' disclosed a bug submitted by b'pratiky054' 
b'Able to run script on https://trello-attachments.s3.amazonaws.com/'

03 Jan 2018

b'Mail.Ru' disclosed a bug submitted by b'dzmitry' 
b'Android MailRu Email: Thirdparty can access private data files with small user interaction'

02 Jan 2018

b'PortSwigger Web Security' disclosed a bug submitted by b'rajwinder' 
b'Improper Certificate Validation'

02 Jan 2018

b'Informatica' disclosed a bug submitted by b'samengmg' 
b'[marketplace.informatica.com] - Template Injection'

02 Jan 2018

1 ... 483 484 485 486 487 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM