Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'WakaTime' disclosed a bug submitted by b'flex0geek' 
b'Can link to websites from profile'

07 Oct 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Running 2 accounts with a single email [Part 2]'

07 Oct 2017

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Reset password more than once with a reset link #2'

07 Oct 2017

b'WakaTime' disclosed a bug submitted by b'flex0geek' 
b'password token validation'

07 Oct 2017

b'Snapchat' disclosed a bug submitted by b'ysx' 
b'Subdomain Takeover via Unclaimed WordPress site'

06 Oct 2017

b'Unikrn' disclosed a bug submitted by b'sp1d3rs' 
b'Persistent XSS found on bin.pinion.gg due to outdated FlowPlayer SWF file with Remote File Inclusion vulnerability.'

05 Oct 2017

b'Unikrn' disclosed a bug submitted by b'wdem' 
b'Weak Session ID Implementation - No Session change on Password change'

05 Oct 2017

b'Gratipay' disclosed a bug submitted by b'sandeepl337' 
b'Adding Used Primary Email Address to attacker account and Account takeover'

05 Oct 2017

b'Weblate' disclosed a bug submitted by b'punkit' 
b' Application allowing old password to be set as new password | hosted.weblate.org'

05 Oct 2017

b'Blockstack' disclosed a bug submitted by b'blash41' 
b'Clickjacking https://blockstack.org/'

05 Oct 2017

b'Weblate' disclosed a bug submitted by b'tungpun' 
b'Add another email address without verification'

05 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Wrong password validation message'

04 Oct 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'chrisnagora' 
b'Bruteforce Unlimited number of password attempts'

04 Oct 2017

b'WordPress' disclosed a bug submitted by b'skansing' 
b'Wordpress 4.8.1 - Rogue editor leads to RCE. And the risks of same origin frame scripting in general'

04 Oct 2017

b'Boozt Fashion AB' disclosed a bug submitted by b'firestone' 
b'Weak Password'

04 Oct 2017

b'Snapchat' disclosed a bug submitted by b'benoculars' 
b'Subdomain Takeover of help.bitstripsforschools.com'

04 Oct 2017

b'Legal Robot' disclosed a bug submitted by b'saikiran-10097' 
b'Allowance of Meta/Null characters'

04 Oct 2017

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Race condition in GitLab import, giving access to other people their imports due to filename collision'

03 Oct 2017

b'delight.im' disclosed a bug submitted by b'darkid' 
b'Logout CSRF'

03 Oct 2017

b'delight.im' disclosed a bug submitted by b'darkid' 
b'Add movie or series CSRF'

03 Oct 2017

1 ... 496 497 498 499 500 ... 727

BY DENIS WERNER - @NOBBD - IMPRESSUM