Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Udemy' disclosed a bug submitted by b'msarmad' 
b'Multiple sub domain are vulnerable because of leaking full path '

25 Jun 2015

b'Shopify' disclosed a bug submitted by b'mafia' 
b'XSS at Bulk editing ProductVariants'

25 Jun 2015

b'WePay' disclosed a bug submitted by b'anshuman_bh' 
b'Unauthorized Access via Join Email Link'

24 Jun 2015

b'Twitter' disclosed a bug submitted by b'avicoder' 
b'Insecure Data Storage in Vine Android App'

24 Jun 2015

b'Mavenlink' disclosed a bug submitted by b'enderun07' 
b'XSS in https://app.mavenlink.com/workspaces/'

22 Jun 2015

b'CloudFlare' disclosed a bug submitted by b'bitquark' 
b'Threat control information leak'

20 Jun 2015

b'WePay' disclosed a bug submitted by b'esamhacks' 
b'Horizontal Privilege Escalation'

19 Jun 2015

b'HackerOne' disclosed a bug submitted by b'seifelsallamy' 
b'Open redirect in "Language change".'

19 Jun 2015

b'HackerOne' disclosed a bug submitted by b'mvcdabra' 
b'Email Notification should be get while changing Paypal Email'

19 Jun 2015

b'PHP' disclosed a bug submitted by b'ruben' 
b'Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow)'

18 Jun 2015

b'Shopify' disclosed a bug submitted by b'mafia' 
b'XSS at importing Product List'

17 Jun 2015

b'Shopify' disclosed a bug submitted by b'mafia' 
b'XSS at Bulk editing products'

17 Jun 2015

b'Ruby on Rails' disclosed a bug submitted by b'ff7f00' 
b'Denial of Service in Action Pack Exception Handling'

16 Jun 2015

b'Ruby on Rails' disclosed a bug submitted by b'joernchen' 
b'RCE due to Web Console IP Whitelist bypass in Rails 4.0 and 4.1'

16 Jun 2015

b'Ruby on Rails' disclosed a bug submitted by b'einstein_' 
b'JSON keys are not properly escaped'

16 Jun 2015

b'Ruby on Rails' disclosed a bug submitted by b'mastahyeti' 
b'rails-ujs will send CSRF tokens to other origins'

16 Jun 2015

b'Coinbase' disclosed a bug submitted by b'dia2diab' 
b'Two-factor authentication (via SMS)'

16 Jun 2015
wont-fix

b'Twitter' disclosed a bug submitted by b'hussein98d' 
b"Reporting user's profile by using another people's ID"

11 Jun 2015

b'concrete5' disclosed a bug submitted by b'egix' 
b'SQL Injection Vulnerability in Concrete5 version 5.7.3.1'

11 Jun 2015

b'Shopify' disclosed a bug submitted by b'paulos_' 
b'Header Misconfiguration - PHP API'

11 Jun 2015

1 ... 661 662 663 664 665 ... 713

BY DENIS WERNER - @NOBBD - IMPRESSUM