Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'yaworsk' 
b'API Webhooks Fire And Are Unlisted After Permissions Removed'

27 Jun 2017

b'Mixmax' disclosed a bug submitted by b'joshualaurencio' 
b'Improper parsing of input could lead to future XSS vulnerabilities in Sequences'

27 Jun 2017

b'Starbucks' disclosed a bug submitted by b'bayotop' 
b'Stored XSS in comments on https://www.starbucks.co.uk/blog/*'

27 Jun 2017

b'Shopify' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Redirect in adding advance cash on delivery app'

27 Jun 2017

b'Weblate' disclosed a bug submitted by b'brdoors3' 
b'Password token validation in https://demo.weblate.org/'

27 Jun 2017

b'Shopify' disclosed a bug submitted by b'jamesclyde' 
b'Stored XSS in *.myshopify.com'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'strukt' 
b'Open redirects protection bypass'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'mickeyhex' 
b'Disclose of phpmyadmin'

27 Jun 2017

b'arxius' disclosed a bug submitted by b'neex' 
b'another local file disclosure via ffmpeg'

26 Jun 2017

b'YouPorn' disclosed a bug submitted by b'myst404' 
b'XSS via login cookie'

26 Jun 2017

b'Pornhub' disclosed a bug submitted by b'txt3rob' 
b'XSS on pornhubselect.com'

26 Jun 2017

b'arxius' disclosed a bug submitted by b'isrsahilmk' 
b'No SPF/DKIM/DMARC Record for lfil.es'

26 Jun 2017

b'Zomato' disclosed a bug submitted by b'harry_mg' 
b'Reflected XSS in Zomato Mobile - category parameter'

26 Jun 2017

b'Dashlane' disclosed a bug submitted by b'kiraak-boy' 
b'Missing Access Control(IDOR) To Know LinkedAccounts '

26 Jun 2017

b'arxius' disclosed a bug submitted by b'cdl' 
b'Local File Disclosure via ffmpeg '

25 Jun 2017

b'Badoo' disclosed a bug submitted by b'alvares97' 
b'Arbitrary modification value "session" (Cookie) in badoo.com'

25 Jun 2017

b'Slack' disclosed a bug submitted by b'boniao_norwin' 
b'"a stored xss issue in share post menu"'

25 Jun 2017

b'Slack' disclosed a bug submitted by b'boniao_norwin' 
b'a stored xss issue in https://files.slack.com'

25 Jun 2017

b'WordPress' disclosed a bug submitted by b'hasanexpert' 
b'Vulnerable to clickjacking'

24 Jun 2017

b'Gratipay' disclosed a bug submitted by b'mr_unknown' 
b'Possible User Session Hijack using Invalid HTTPS certificate on inside.gratipay.com domain'

24 Jun 2017

1 ... 493 494 495 496 497 ... 694

BY DENIS WERNER - @NOBBD - IMPRESSUM