Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Imgur' disclosed a bug submitted by b'1n3' 
b'Server Side Request Forgery In Video to GIF Functionality'

22 Mar 2016

b'Veris' disclosed a bug submitted by b'sathish' 
b'Complete Profile URL is not Random and not expiring '

22 Mar 2016

b'Vimeo' disclosed a bug submitted by b'saeedhashem' 
b'Missing rate limit on private videos password'

22 Mar 2016

b'Gratipay' disclosed a bug submitted by b'deleted' 
b'Possible SQL injection on "Jump to twitter"'

21 Mar 2016

b'Gratipay' disclosed a bug submitted by b'bugdisclose1' 
b'Email Forgery through Mandrillapp SPF'

19 Mar 2016

b'Gratipay' disclosed a bug submitted by b'apple1337' 
b'SPF/DKIM/DMARC for aspen.io'

19 Mar 2016

b'Twitter' disclosed a bug submitted by b'ericlaw' 
b'Profile Pic padding (Length-hiding) fails due to use of GZIP'

18 Mar 2016

b'ok.ru' disclosed a bug submitted by b'ragnar' 
b'????? ?????? ?? csrf-?? ? m.ok.ru'

18 Mar 2016

b'withinsecurity' disclosed a bug submitted by b'geekboy' 
b'Error Page Text Injection #106350'

18 Mar 2016

b'Zomato' disclosed a bug submitted by b'arbaz_hussain' 
b'CSRF AT SELECTING ZAMATO HANDLE'

18 Mar 2016

b'VK.com' disclosed a bug submitted by b'bo0om' 
b'????????? ??????? ????????? ? ??????????? ??????? ????????????? YouTrack'

18 Mar 2016

b'Twitter' disclosed a bug submitted by b'bugdisclose' 
b'Sub-Domain Takeover'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b'User enumeration via error message'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b'Insecure Direct Member Disclosure'

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b"Insecure Direct 'org-invite-log' References"

18 Mar 2016

b'Veris' disclosed a bug submitted by b'zuhan' 
b"Insecure Direct 'org-visitor-log' References"

18 Mar 2016

b'HackerOne' disclosed a bug submitted by b'anshuman_bh' 
b'Sending emails (via HackerOne) impersonating other users'

18 Mar 2016

b'Automattic' disclosed a bug submitted by b'voodookobra' 
b'Possible Timing Side-Channel in XMLRPC Verification'

17 Mar 2016

b'Veris' disclosed a bug submitted by b'yaworsk' 
b'Not Using Secure Flag Option on Cookies Could Lead to a Man in the Middle Session Highjacking'

17 Mar 2016

b'HackerOne' disclosed a bug submitted by b'charfe' 
b'Private program activity timeline information disclosure'

16 Mar 2016

1 ... 669 670 671 672 673 ... 751

BY DENIS WERNER - @NOBBD - IMPRESSUM