Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Robocoin' disclosed a bug submitted by b'4lemon' 
b'Error stack trace'

03 Apr 2015

b'Robocoin' disclosed a bug submitted by b'4lemon' 
b'Stored XSS in api key of operator wallet'

03 Apr 2015

b'Robocoin' disclosed a bug submitted by b'4lemon' 
b'stored xss in transaction'

03 Apr 2015

b'Vimeo' disclosed a bug submitted by b'adrianbelen' 
b'abusing Thumbnails(https://vimeo.com/upload/select_thumb) to see a private video'

03 Apr 2015

b'Mobile Vikings' disclosed a bug submitted by b'4lemon' 
b'CSRF token from another valid user session accepted'

03 Apr 2015
wont-fix

b'Mobile Vikings' disclosed a bug submitted by b'4lemon' 
b'Enum phone numbers thru /en/sims/topup/add/'

03 Apr 2015

b'Slack' disclosed a bug submitted by b'satishb3' 
b'Team admin can add billing contacts'

03 Apr 2015

b'Twitter' disclosed a bug submitted by b'seifelsallamy' 
b'Open Redirect leak of authenticity_token lead to full account take over.'

03 Apr 2015

b'Twitter' disclosed a bug submitted by b'masatokinugawa' 
b'XSS in twitter.com/safety/unsafe_link_warning'

03 Apr 2015

b'Vimeo' disclosed a bug submitted by b'jensk' 
b'Can message users without the proper authorization'

01 Apr 2015

b'The Internet' disclosed a bug submitted by b'prosecco-inria' 
b'FREAK: Factoring RSA_EXPORT Keys to Impersonate TLS Servers'

01 Apr 2015

b'Coinbase' disclosed a bug submitted by b'sasi2103' 
b'Invoice Details activate JS that filled in '

30 Mar 2015

b'Sucuri' disclosed a bug submitted by b'jitendra' 
b'Form contained inside page loaded over SSL submits its contents to another page over HTTP '

29 Mar 2015
wont-fix

b'Vimeo' disclosed a bug submitted by b'localpwn' 
b'Bypassing Email verification '

29 Mar 2015
wont-fix

b'Square' disclosed a bug submitted by b'aaj' 
b'Privilege Escalation'

28 Mar 2015

b'HackerOne' disclosed a bug submitted by b'mazengamal' 
b'Team member invitations to sandboxed teams are not invalidated consistently'

28 Mar 2015

b'itBit Exchange' disclosed a bug submitted by b'shahmeer_amir' 
b'Leakage of sensitive wallet tokens to third party sites'

28 Mar 2015

b'Mail.Ru' disclosed a bug submitted by b'zoczus' 
b'Same Origin Policy bypass'

27 Mar 2015

b'Twitter' disclosed a bug submitted by b'xorb' 
b'[Stored XSS] vine.co - profile page'

26 Mar 2015

b'Phabricator' disclosed a bug submitted by b'agarri_fr' 
b'SSRF vulnerability (access to metadata server on EC2 and OpenStack)'

26 Mar 2015

1 ... 648 649 650 651 652 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM