Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Automattic' disclosed a bug submitted by b'ysx' 
b'[public-api.wordpress.com] Stored XSS via Crafted Developer App Description'

01 Dec 2017

b'Automattic' disclosed a bug submitted by b'ysx' 
b'[Simplenote for Windows] Client RCE via External JavaScript Inclusion leveraging Electron'

01 Dec 2017

b'Automattic' disclosed a bug submitted by b'jouko' 
b'Lazy Load stored XSS'

01 Dec 2017

b'Automattic' disclosed a bug submitted by b'edio' 
b'Improper markup sanitization.'

01 Dec 2017

b'Mail.Ru' disclosed a bug submitted by b'whitesector' 
b'Stored XSS using SVG on subdomain infra.mail.ru'

01 Dec 2017

b'Informatica' disclosed a bug submitted by b'0ways' 
b'Unrestricted file upload - cloudacademy.informatica.com'

01 Dec 2017

b'Coursera' disclosed a bug submitted by b'c0rdis' 
b'Stored XSS via transloadit.com and imageproxy'

30 Nov 2017

b'HackerOne' disclosed a bug submitted by b'kenziy' 
b'Query parameter reordering causes redirect page to render unsafe URL'

30 Nov 2017

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'paresh_parmar' 
b'stored xss in comments : driver exam '

30 Nov 2017

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'vinothkumar' 
b'Access Grab_Road BigData Database via Open Presto coordinator'

30 Nov 2017

b'Dropbox' disclosed a bug submitted by b'bagipro' 
b'Android - Access of some not exported content providers '

30 Nov 2017

b'HackerOne' disclosed a bug submitted by b'cyriac' 
b'Validation message in Bounty award endpoint can be used to determine program balances'

29 Nov 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'hassham' 
b'Remote Code Execution at http://tw.corp.ubnt.com'

29 Nov 2017

b'Inflection' disclosed a bug submitted by b'hk755a' 
b'Limited arbitrary text inclusion in user invite emails'

29 Nov 2017

b'Inflection' disclosed a bug submitted by b'zs75' 
b'Business Logic Flaw allowing Privilege Escalation'

29 Nov 2017

b'Inflection' disclosed a bug submitted by b'hk755a' 
b'Unsubscribe Any User'

29 Nov 2017

b'TTS Bug Bounty' disclosed a bug submitted by b'picklepwns' 
b'Subdomain Takeover'

28 Nov 2017

b'GitLab' disclosed a bug submitted by b'intercept9' 
b'SSRF via git Repo by URL Abuse'

28 Nov 2017

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] IDOR - Delete/Deactivate any special menu of any Restaurants from Zomato'

28 Nov 2017

b'VK.com' disclosed a bug submitted by b'executor' 
b'Stored xss ? /lead_forms_app.php'

28 Nov 2017

1 ... 489 490 491 492 493 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM