Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Yelp' disclosed a bug submitted by b'w3b7ricks73r' 
b'IDOR(indirect object references) on add friend,complement and send message '

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'bobrov' 
b'[engineeringblog.yelp.com] CRLF Injection'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'r0h17' 
b'Error Page Text Injection'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'pisarenko' 
b'Possible content spoofing due to missing error page'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'h1s0k4' 
b'Nginx server version disclosure on engineeringblog'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'vaxo' 
b'Clickjacking: X-Frame Header Missing'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'jessepinkman' 
b'ClickJacking '

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'h4ck3r0ne' 
b'Clickjacking @ Main Domain[www.yelp.com]'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'denispugachev' 
b'[Yelp Blog] Backslash in search string causes JS error'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'us111' 
b'Research papers on yelp are getting indexed by google bots.'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'us111' 
b'One of yelp.com url is redirecting to domain which is not yet purchased'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'na5ne3t' 
b'User can be fooled to Bookmark any restaurant by clickjacking'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'mohammad_obaid' 
b'ClickJacking in editing business name'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'hk755a' 
b'IDNs displayed in unicode in messages/about/talk sections (Homograph Attack)'

09 Nov 2017

b'Yelp' disclosed a bug submitted by b'hk755a' 
b'Password reset token not expiring'

09 Nov 2017

b'HackerOne' disclosed a bug submitted by b'edio' 
b'Blind SSRF in "Integrations" by abusing a bug in Ruby\'s native resolver.'

09 Nov 2017

b'GitLab' disclosed a bug submitted by b'edio' 
b'SSRF vulnerability in gitlab.com via project import.'

09 Nov 2017

b'Aspen' disclosed a bug submitted by b'abartan' 
b'Email Spoofing'

09 Nov 2017

b'Automattic' disclosed a bug submitted by b'arafat' 
b'Invalidate session after password reset on https://polldaddy.com'

09 Nov 2017

b'Infogram' disclosed a bug submitted by b'romanshyadav' 
b'A10 \xe2\x80\x93 Unvalidated Redirects and Forwards'

09 Nov 2017

1 ... 494 495 496 497 498 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM