Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Udemy' disclosed a bug submitted by b'mthirup' 
b'teach.udemy.com log poison vulnerability through wordpress debug.log being publically available'

09 Jun 2015

b'Shopify' disclosed a bug submitted by b'nismo' 
b'XSS in myshopify.com Admin site in TAX Overrides'

09 Jun 2015

b'MapLogin' disclosed a bug submitted by b'dia2diab' 
b'Not Completed Accounts Take Over (Urgent bug)'

09 Jun 2015

b'HackerOne' disclosed a bug submitted by b'janpaul123' 
b'Report title autocompletion'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'robots-txt' 
b'Flawed account creation process allows registration of usernames corresponding to existing file names'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'tomvg' 
b'Privilege escalation..., or not?!'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'mikebrooks' 
b'SPF whitelist of mandrill leads to email forgery'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'antrax' 
b'Reopen Disable Accounts/ Hidden Access After Disable'

08 Jun 2015

b'concrete5' disclosed a bug submitted by b'egix' 
b'Multiple Reflected Cross Site Scripting Vulnerabilities in Concrete5 version 5.7.3.1'

06 Jun 2015

b'concrete5' disclosed a bug submitted by b'egix' 
b'Sendmail Remote Code Execution Vulnerability in Concrete5 version 5.7.3.1'

06 Jun 2015

b'WordPoints' disclosed a bug submitted by b'vkc' 
b'Rank Creation function not validating user inputs.'

04 Jun 2015
wont-fix

b'HackerOne' disclosed a bug submitted by b'brdoors2' 
b"Logic error with notifications: user that has left team continues to receive notifications and can not 'clean' this area on account"

04 Jun 2015

b'Dropbox' disclosed a bug submitted by b'mahitman' 
b'XSS in https://hackpad.com/'

02 Jun 2015

b'Shopify' disclosed a bug submitted by b'lccunha' 
b'Authentication Failed Mobile version'

02 Jun 2015

b'Vimeo' disclosed a bug submitted by b'dor1s' 
b'API: missing invalidation of OAuth2 Authorization Code during access revocation causes authorization bypass'

31 May 2015

b'Shopify' disclosed a bug submitted by b'sukhjiwansingh' 
b'Stored XSS in the Shopify Discussion Forums'

31 May 2015

b'Python' disclosed a bug submitted by b'johnleitch' 
b'Python: imageop Unsafe Arithmetic'

31 May 2015

b'Slack' disclosed a bug submitted by b'satishb3' 
b'Team admin can change unauthorized team setting (allow_message_deletion)'

30 May 2015

b'HackerOne' disclosed a bug submitted by b'mathias' 
b'RTL override symbol not stripped from file names'

28 May 2015

b'HackerOne' disclosed a bug submitted by b'dutchgraa' 
b'PNG compression DoS'

28 May 2015

1 ... 687 688 689 690 691 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM