Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'harishkumar0394' 
b'Missing of csrf protection '

07 Dec 2015

b'Coinbase' disclosed a bug submitted by b'hazimaslam' 
b'Stored-XSS in https://www.coinbase.com/'

07 Dec 2015

b'itBit Exchange' disclosed a bug submitted by b'behroz' 
b'email not required to be unique'

04 Dec 2015

b'itBit Exchange' disclosed a bug submitted by b'secureashishpathak' 
b'No password length restriction denial of service'

04 Dec 2015

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Non-owner user can remove online store channel and re-add it.'

03 Dec 2015

b'Binary.com' disclosed a bug submitted by b'karimrahal' 
b'Email Verification Link can be Used as Password Reset Link!'

03 Dec 2015

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b' [CSRF] Activate PayPal Express Checkout'

03 Dec 2015

b'Shopify' disclosed a bug submitted by b'cj71f' 
b'XSS in creating tweets'

03 Dec 2015

b'Twitter' disclosed a bug submitted by b'ericr' 
b'Following a User Actually Follows Another User'

02 Dec 2015

b'HackerOne' disclosed a bug submitted by b'harisec' 
b'HTTP header injection in info.hackerone.com allows setting cookies for hackerone.com'

02 Dec 2015

b'HackerOne' disclosed a bug submitted by b'abhisheksingh' 
b'Hackerone impersonation'

02 Dec 2015

b'Twitter' disclosed a bug submitted by b'ericr' 
b'Following a User After Favoriting Actually Follows Another User (related to #95243)'

02 Dec 2015

b'HackerOne' disclosed a bug submitted by b'smiegles' 
b"profile cover can also load external URL's "

02 Dec 2015

b'HackerOne' disclosed a bug submitted by b'harshafriend4all' 
b'Limited CSRF bypass.'

02 Dec 2015

b'HackerOne' disclosed a bug submitted by b'danlec' 
b'Pre-generation of 2FA secret/backup codes seems like an unnecessary risk'

02 Dec 2015

b'Coinbase' disclosed a bug submitted by b'androm3da' 
b'iframes considered harmful'

01 Dec 2015

b'Coinbase' disclosed a bug submitted by b'paresh_parmar' 
b'OAUTH pemission set as true= lead to authorize malicious application'

01 Dec 2015

b'Mail.Ru' disclosed a bug submitted by b'bigbear_' 
b'[api.allodsteam.com] Authentication Data'

01 Dec 2015

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'CSV Excel Macro Injection Vulnerability in export list of current users - app.shopify.com'

01 Dec 2015

b'Shopify' disclosed a bug submitted by b'jurajk' 
b'Cookie securing your "Opening soon" store is not secured against XSS'

01 Dec 2015

1 ... 667 668 669 670 671 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM