Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'mrtuxracer' 
b'[book.zomato.com] Account Recover Plaintext Passwords'

30 Jun 2017

b'Zomato' disclosed a bug submitted by b'albinowax' 
b'CORS Misconfiguration on www.zomato.com'

30 Jun 2017

b'Zomato' disclosed a bug submitted by b'pabster' 
b'CSRF To Like/Unlike Photos'

30 Jun 2017

b'Zomato' disclosed a bug submitted by b'rasi-ras' 
b'xss found in zomato'

30 Jun 2017

b'GitLab' disclosed a bug submitted by b'pruby' 
b'Missing/Breach of Internal Security Boundary - Access to Job Queue Results in Remote Code Execution'

28 Jun 2017

b'Parrot Sec' disclosed a bug submitted by b'no_body_cares' 
b'http://lists.parrotsec.org vulnerable to MITM'

28 Jun 2017

b'Moneybird' disclosed a bug submitted by b'mattweidner' 
b'Webhook allows sending payload using insecure HTTP protocol'

28 Jun 2017

b'Weblate' disclosed a bug submitted by b'abiral' 
b'Captcha bypass at registration'

28 Jun 2017

b'Weblate' disclosed a bug submitted by b'abiral' 
b'Adding Email lacks Password validation'

28 Jun 2017

b'Uber' disclosed a bug submitted by b'temmyscript' 
b'deleting payment profile during active trip puts account into arrears but active trip is temporarily \xe2\x80\x9cfree\xe2\x80\x9d'

28 Jun 2017

b'Shopify' disclosed a bug submitted by b'bored-engineer' 
b'XSS on $shop$.myshopify.com/admin/ and partners.shopify.com via whitelist bypass in SVG icon for sales channel applications'

27 Jun 2017

b'Shopify' disclosed a bug submitted by b'yaworsk' 
b'API Webhooks Fire And Are Unlisted After Permissions Removed'

27 Jun 2017

b'Mixmax' disclosed a bug submitted by b'joshualaurencio' 
b'Improper parsing of input could lead to future XSS vulnerabilities in Sequences'

27 Jun 2017

b'Starbucks' disclosed a bug submitted by b'bayotop' 
b'Stored XSS in comments on https://www.starbucks.co.uk/blog/*'

27 Jun 2017

b'Shopify' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Redirect in adding advance cash on delivery app'

27 Jun 2017

b'Weblate' disclosed a bug submitted by b'brdoors3' 
b'Password token validation in https://demo.weblate.org/'

27 Jun 2017

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'Stored XSS in *.myshopify.com'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'strukt' 
b'Open redirects protection bypass'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'mickeyhex' 
b'Disclose of phpmyadmin'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'neex' 
b'another local file disclosure via ffmpeg'

26 Jun 2017

1 ... 490 491 492 493 494 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM