Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'ysx' 
b'[Markdown] Stored XSS via character encoding parser bypass'

18 Oct 2017

b'Lyst' disclosed a bug submitted by b'tripwire' 
b'SSRF at iris.lystit.com'

18 Oct 2017

b'Vimeo' disclosed a bug submitted by b'opnsec' 
b'Watch any Password Video without password'

18 Oct 2017

b'Vimeo' disclosed a bug submitted by b'opnsec' 
b'OAuth 2 Authorization Bypass via CSRF and Cross Site Flashing'

18 Oct 2017

b'Vimeo' disclosed a bug submitted by b'opnsec' 
b'Images and Subtitles Leakage from private videos'

18 Oct 2017

b'CodeIgniter' disclosed a bug submitted by b'hackerneo' 
b'If the developer forgets to remove the built in controller welcome.php it helps the attacker to identify that the site is built with Codeigniter'

18 Oct 2017

b'QIWI' disclosed a bug submitted by b'pengenkiddy' 
b'[qiwi.com] XSS on payment form'

17 Oct 2017

b'Inflection' disclosed a bug submitted by b'malcolmx' 
b'Open Redirect through POST Request'

16 Oct 2017

b'HackerOne' disclosed a bug submitted by b'hk755a' 
b'Homograph fix Bypass '

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'agarri_fr' 
b'SSRF issue in "URL target" allows [REDACTED]'

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'agarri_fr' 
b'Remote code execution as root on [REDACTED]'

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'zombiehelp54' 
b'open redirect in <your_zendesk>.zendesk.com'

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'harry_mg' 
b'Stored XSS in Draft Articles. '

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'boniao_norwin' 
b'Unvalidated / Open Redirect'

16 Oct 2017

b'Zendesk' disclosed a bug submitted by b'cablej' 
b'Race Condition in Article "Helpful" Indicator'

16 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'bughunter111' 
b'Cross Site WebSocket Hijacking'

16 Oct 2017

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pouya' 
b'Full Path Disclosure In EasyDB'

16 Oct 2017

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'kiraak-boy' 
b'Your Application Have Cacheable SSL Pages'

16 Oct 2017

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pouya' 
b'Full Path Disclosure in password lock'

16 Oct 2017

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'phenix' 
b'SMTP server allows anonymous relay from internal addresses to internal addresses'

16 Oct 2017

1 ... 493 494 495 496 497 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM