Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Vimeo' disclosed a bug submitted by b'pranav_hivarekar' 
b'CRITICAL vulnerability - Insecure Direct Object Reference - Unauthorized access to `Videos` of Channel whose privacy is set to `Private`.'

18 Mar 2015

b'HackerOne' disclosed a bug submitted by b'danlec' 
b'Improperly validated fields allows injection of arbitrary HTML via spoofed React objects'

18 Mar 2015

b'PHP' disclosed a bug submitted by b'libnex' 
b'ZIP Integer Overflow leads to writing past heap boundary'

18 Mar 2015

b'PHP' disclosed a bug submitted by b'ryat' 
b'Use After Free Vulnerability in unserialize()'

17 Mar 2015

b'PHP' disclosed a bug submitted by b'ryat' 
b'Use after free vulnerability in unserialize() with DateInterval'

17 Mar 2015

b'Slack' disclosed a bug submitted by b'shahmeer_amir' 
b'Reflective XSS can be triggered in IE'

15 Mar 2015

b'OpenSSL' disclosed a bug submitted by b'geeknik' 
b'X509_to_X509_REQ NULL pointer deref'

15 Mar 2015

b'Nearby Live' disclosed a bug submitted by b'corb3nik' 
b"Gain access to any user's email address"

14 Mar 2015

b'Twitter' disclosed a bug submitted by b'seifelsallamy' 
b'open redirect sends authenticity_token to any website or (ip address)'

14 Mar 2015

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b'getting emails of users/removing them from victims account [using typical attack]'

13 Mar 2015

b'Vimeo' disclosed a bug submitted by b'shahmeer_amir' 
b'Red October 1511493148.cloud.vimeo.com'

13 Mar 2015

b'IRCCloud' disclosed a bug submitted by b'jackds' 
b'Email verification links still valid after changing it 2x'

13 Mar 2015
wont-fix

b'Coinbase' disclosed a bug submitted by b'whitj00' 
b'Credit Card Validation Issue'

12 Mar 2015

b'HackerOne' disclosed a bug submitted by b'guido' 
b"Substantially weakened authenticity verification when using 'Remember me for a week'"

12 Mar 2015
wont-fix

b'concrete5' disclosed a bug submitted by b'yujitounai' 
b'Stored XSS in concrete5 5.7.0.4.'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player MP4 Use-After-Free Vulnerability'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player Out-of-Bound Read/Write Vulnerability'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player MP4 Use-After-Free Vulnerability'

11 Mar 2015

b'Coinbase' disclosed a bug submitted by b'prashanthvarma' 
b'open authentication bug'

11 Mar 2015

b'HackerOne' disclosed a bug submitted by b'dragonfly' 
b'Auto Approval of Invitation to join Team as a Team member'

11 Mar 2015

1 ... 672 673 674 675 676 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM