Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Open-redirect on hackerone.com'

23 Apr 2015

b'HackerOne' disclosed a bug submitted by b'deepak_das' 
b'Missing spf flags for hackerone.com'

23 Apr 2015

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'HTTP Response Splitting (CRLF injection) in report_story'

21 Apr 2015

b'Python' disclosed a bug submitted by b'hugbounter' 
b'Tokenizer crash when processing undecodable source code'

21 Apr 2015

b'Phabricator' disclosed a bug submitted by b'candux' 
b'XSS with Time-of-Day Format'

19 Apr 2015

b'Shopify' disclosed a bug submitted by b'shhnjk' 
b'comment out causes information disclosure'

19 Apr 2015

b'Vimeo' disclosed a bug submitted by b'michelgaschet' 
b'Vimeo + & Vimeo PRO Unautorised Tax bypass'

18 Apr 2015

b'Vimeo' disclosed a bug submitted by b'avlidienbrunn' 
b'URGENT - Subdomain Takeover on status.vimeo.com due to unclaimed domain pointing to statuspage.io'

18 Apr 2015

b'Shopify' disclosed a bug submitted by b'sappi' 
b'IDOR expire other user sessions'

17 Apr 2015

b'Dropbox' disclosed a bug submitted by b'haquaman' 
b'XSS in version history of an HTML file in a shared folder'

17 Apr 2015
wont-fix

b'HackerOne' disclosed a bug submitted by b'rickypaipie' 
b"Reflected File Download attack allows attacker to 'upload' executables to hackerone.com domain"

16 Apr 2015

b'Shopify' disclosed a bug submitted by b'shpendk' 
b'Missing spf flags for myshopify.com'

16 Apr 2015

b'PHP' disclosed a bug submitted by b'ryat' 
b'Type Confusion Vulnerability in SoapClient'

16 Apr 2015

b'Adobe' disclosed a bug submitted by b'reactors08' 
b'files.acrobat.com stored XSS via send file'

14 Apr 2015

b'PHP' disclosed a bug submitted by b'libnex' 
b'Buffer Over flow when parsing tar/zip/phar in phar_set_inode'

14 Apr 2015

b'PHP' disclosed a bug submitted by b'libnex' 
b'Buffer Over-read in unserialize when parsing Phar'

14 Apr 2015

b'PHP' disclosed a bug submitted by b'mongo' 
b'Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER'

14 Apr 2015

b'PHP' disclosed a bug submitted by b'mongo' 
b'php_stream_url_wrap_http_ex() type-confusion vulnerability'

14 Apr 2015

b'Whisper' disclosed a bug submitted by b'adrianbelen' 
b'Bypass pin(4 digit passcode on your android app)'

12 Apr 2015

b'itBit Exchange' disclosed a bug submitted by b'madmantm' 
b'ITBit Vulnerable to SSLSTrip'

12 Apr 2015
wont-fix

1 ... 692 693 694 695 696 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM