Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby on Rails' disclosed a bug submitted by b'nahamsec' 
b'Arbitrary file existence disclosure in Action Pack'

20 Nov 2014

b'Factlink' disclosed a bug submitted by b'nahamsec' 
b'File name/folder enumeration.'

18 Nov 2014

b'IRCCloud' disclosed a bug submitted by b'hari-cybex' 
b'Password type input with auto-complete enabled'

17 Nov 2014
wont-fix

b'IRCCloud' disclosed a bug submitted by b'hari-cybex' 
b'Missing Character Restriction'

17 Nov 2014
wont-fix

b'Twitter' disclosed a bug submitted by b'shahriyar' 
b'Token remains alive ever after logging out!'

17 Nov 2014
wont-fix

b'The Internet' disclosed a bug submitted by b'mik' 
b'rsync hash collisions may allow an attacker to corrupt or modify files'

17 Nov 2014

b'Secret' disclosed a bug submitted by b'vinothkumar' 
b'Broken Authentication and Session Management'

17 Nov 2014

b'Square' disclosed a bug submitted by b'cliffordtrigo' 
b'XSS [BookFresh]'

17 Nov 2014

b'ExpressionEngine' disclosed a bug submitted by b'deadlock' 
b'Stored Cross-Site Scripting Vulnerability in /admin.php?/cp/admin_system/general_configuration'

17 Nov 2014

b'Square' disclosed a bug submitted by b'cliffordtrigo' 
b'XSS in Client Past Activity '

17 Nov 2014

b'Square' disclosed a bug submitted by b'avlidienbrunn' 
b'CRITICAL Account takeover via AngularJS template injection in connect.squareup.com'

17 Nov 2014

b'Twitter' disclosed a bug submitted by b'internetwache' 
b'Full path disclosure at ads.twitter.com'

17 Nov 2014

b'Square' disclosed a bug submitted by b'cliffordtrigo' 
b'Editing Client Details of other People'

17 Nov 2014

b'Twitter' disclosed a bug submitted by b'arbitrarycode' 
b'ads.twitter.com xss'

17 Nov 2014

b'Square' disclosed a bug submitted by b'adrianbelen' 
b'malicious file upload'

17 Nov 2014

b'Mavenlink' disclosed a bug submitted by b'siddiki' 
b'Email field filtering problem.'

17 Nov 2014

b'Sucuri' disclosed a bug submitted by b'webpentest' 
b'Usage of HTTP for exporting graph data as images'

17 Nov 2014

b'Twitter' disclosed a bug submitted by b'batram' 
b'XSS platform.twitter.com'

17 Nov 2014

b'HackerOne' disclosed a bug submitted by b'shahmeer_amir' 
b'No email verification on username change'

17 Nov 2014

b'Twitter' disclosed a bug submitted by b'batram' 
b'XSS platform.twitter.com | video-js metadata'

17 Nov 2014

1 ... 658 659 660 661 662 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM