Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Vimeo' disclosed a bug submitted by b'dor1s' 
b'API: missing invalidation of OAuth2 Authorization Code during access revocation causes authorization bypass'

31 May 2015

b'Shopify' disclosed a bug submitted by b'sukhjiwansingh' 
b'Stored XSS in the Shopify Discussion Forums'

31 May 2015

b'Python' disclosed a bug submitted by b'johnleitch' 
b'Python: imageop Unsafe Arithmetic'

31 May 2015

b'Slack' disclosed a bug submitted by b'satishb3' 
b'Team admin can change unauthorized team setting (allow_message_deletion)'

30 May 2015

b'HackerOne' disclosed a bug submitted by b'mathias' 
b'RTL override symbol not stripped from file names'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'dutchgraa' 
b'PNG compression DoS'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'introvertmac' 
b'Logical issues with account settings'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'introvertmac' 
b'Email spoofing '

28 May 2015

b'HackerOne' disclosed a bug submitted by b'xtross1' 
b'Autocomplete enabled in Paypal preferences'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b'Issue with remember_user_token'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b'Issue with password change'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'danielchatfield' 
b'External URL page bypass'

28 May 2015

b'Sucuri' disclosed a bug submitted by b'masatokinugawa' 
b'Open Redirect in unmask.sucuri.net'

27 May 2015

b'Romit' disclosed a bug submitted by b'kabeel' 
b'Email Enumeration (POC)'

27 May 2015

b'Coinbase' disclosed a bug submitted by b'mohdhaji87' 
b'New Device confirmation tokens are not properly validated.'

25 May 2015

b'Coinbase' disclosed a bug submitted by b'alihasanghauri' 
b'New Device Confirmation, token is valid until not used. '

24 May 2015

b'Twitter' disclosed a bug submitted by b'deepak_das' 
b'Cross site Port Scanning bug in twitter developers console '

23 May 2015
wont-fix

b'PHP' disclosed a bug submitted by b'libnex' 
b'invalid pointer free() in phar_tar_process_metadata()'

22 May 2015

b'Mail.Ru' disclosed a bug submitted by b'ddworken' 
b'XSS in touch.sports.mail.ru'

21 May 2015

b'Shopify' disclosed a bug submitted by b'ishikawa' 
b'Lack of SSL Pinning on POS Application ( iOS )'

21 May 2015
wont-fix

1 ... 663 664 665 666 667 ... 713

BY DENIS WERNER - @NOBBD - IMPRESSUM