Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'sandeep100928' 
b'Problem with OAuth'

14 Nov 2015

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Send AJAX request to external domain'

14 Nov 2015

b'HackerOne' disclosed a bug submitted by b'ragnar' 
b'Cross-domain AJAX request'

14 Nov 2015

b'Binary.com' disclosed a bug submitted by b'zombiehelp54' 
b"login to any user's cashier account and full account information disclosure"

14 Nov 2015

b'PHP' disclosed a bug submitted by b'ryat' 
b'zend_throw_or_error() format string vulnerability'

14 Nov 2015

b'Python' disclosed a bug submitted by b'androm3da' 
b'tokenizer crash when processing undecodable source code'

14 Nov 2015

b'Udemy' disclosed a bug submitted by b'adrianbelen' 
b'leak receipt of another user'

13 Nov 2015

b'Zendesk' disclosed a bug submitted by b'zombiehelp54' 
b'Stored XSS in comments'

13 Nov 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[ling.go.mail.ru] Server-Status opened for all users'

13 Nov 2015

b'Binary.com' disclosed a bug submitted by b'paulos_' 
b'Cross Site Scripting'

13 Nov 2015

b'ownCloud' disclosed a bug submitted by b'mohammedalsaggaf' 
b'owncloud.com: Content Sniffing not disabled'

12 Nov 2015

b'Shopify' disclosed a bug submitted by b'elamaran619' 
b'Privilege escalation and circumvention of permission to limited access user'

11 Nov 2015

b'Slack' disclosed a bug submitted by b'hassham' 
b'File upload XSS (Java applet) on http://slackatwork.com/'

11 Nov 2015

b'Slack' disclosed a bug submitted by b'harry_mg' 
b'Self-XSS in posts by formatting text as code'

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'shahmeer-amir' 
b'Accessing Payments page and adding payment methods with limited access accounts'

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'shahmeer-amir' 
b'Missing authorization check on dashboard overviews'

10 Nov 2015

b'Slack' disclosed a bug submitted by b'harry_mg' 
b'Stored XSS in Slack (weird, trial and error)'

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'brakhane' 
b"A 'Full access' administrator is able to see the shop owners user details"

10 Nov 2015

b'Shopify' disclosed a bug submitted by b'rms' 
b'List of devices is accessible regardless of the account limitations'

10 Nov 2015

b'Slack' disclosed a bug submitted by b'harry_mg' 
b'Reflected Self-XSS in Slack'

10 Nov 2015

1 ... 623 624 625 626 627 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM