Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Square' disclosed a bug submitted by b'jmoore15' 
b'Delayed, fraudulent transactions possible with encrypted Square Reader devices due to lack of server-side verification of device transaction counter'

24 Jul 2015

b'Shopify' disclosed a bug submitted by b'nismo' 
b'Bulk Discount App in myshopify.com exposes http://bulkdiscounts.shopifyapps.com vulnerable to XSS'

23 Jul 2015

b'Marktplaats' disclosed a bug submitted by b'bugs3ra' 
b'Secret Password reset key disclosed to third party site via referer in header'

23 Jul 2015

b'Marktplaats' disclosed a bug submitted by b'bugs3ra' 
b'Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS) '

23 Jul 2015

b'WordPoints' disclosed a bug submitted by b'ru94mb' 
b'Weak Cryptographic Hash'

23 Jul 2015

b'Dropbox' disclosed a bug submitted by b'mafia' 
b'Get email ID of any user on hackpad.com'

22 Jul 2015

b'Zaption' disclosed a bug submitted by b'sobolev' 
b'Cheating at gallery rating'

22 Jul 2015

b'Keybase' disclosed a bug submitted by b'wesecureapp' 
b'Stealing CSRF Tokens'

22 Jul 2015

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Logical Issue (Boosting Reputation points)'

21 Jul 2015
wont-fix

b'Shopify' disclosed a bug submitted by b'nismo' 
b'XSS in Myshopify Admin Site in DISCOUNTS'

20 Jul 2015

b'VK.com' disclosed a bug submitted by b'vladislav805' 
b'API: Bug in method auth.validatePhone'

17 Jul 2015

b'HackerOne' disclosed a bug submitted by b'mafia' 
b'Accessing title of the report of which you are marked as duplicate'

17 Jul 2015

b'Yahoo!' disclosed a bug submitted by b'dia2diab' 
b'CSRF in Add Publications Action ..'

16 Jul 2015

b'Udemy' disclosed a bug submitted by b'rennhofer' 
b'xss profile'

16 Jul 2015

b'Shopify' disclosed a bug submitted by b'prakharprasad' 
b'Attention! Remote Code Execution at http://wpt.ec2.shopify.com/'

16 Jul 2015

b'Yahoo!' disclosed a bug submitted by b'netsparker' 
b'Another XSS in UK Cars Yahoo'

15 Jul 2015

b'concrete5' disclosed a bug submitted by b'netsparker' 
b'Multiple XSS Vulnerabilities in Concrete5 5.7.3.1'

15 Jul 2015

b'Shopify' disclosed a bug submitted by b'nismo' 
b'Expire User Sessions in Admin Site does not expire user session in Shopify Application in IOS'

15 Jul 2015

b'Shopify' disclosed a bug submitted by b'alpha' 
b"SSRF via 'Add Image from URL' feature"

15 Jul 2015

b'Envoy' disclosed a bug submitted by b'egyxos' 
b'XSS in "Guest Pre-Registration" page after registration'

15 Jul 2015

1 ... 637 638 639 640 641 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM