Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Fake URL + Additional vectors for homograph attack'

09 May 2015

b'Twitter' disclosed a bug submitted by b'anshuman_bh' 
b'Unauthorized Tweeting on behalf of Account Owners'

07 May 2015

b'Flash' disclosed a bug submitted by b'irsdl' 
b'Flash Cross Domain Policy Bypass by Using File Upload and Redirection - only in Chrome'

06 May 2015

b'HackerOne' disclosed a bug submitted by b'leander' 
b'(lack of) smtp transport layer security'

05 May 2015
wont-fix

b'Slack' disclosed a bug submitted by b'uttam5oren' 
b'Logout any user of same team'

05 May 2015

b'Shopify' disclosed a bug submitted by b'zerohat' 
b'Content Spoofing'

05 May 2015

b'Twitter' disclosed a bug submitted by b'bobrov' 
b'[mobile.twitter.com / twitter.com] CSRF protection bypass'

04 May 2015

b'Twitter' disclosed a bug submitted by b'batuhan' 
b'Twitter Card - Parent Window Redirection'

04 May 2015

b'Vimeo' disclosed a bug submitted by b'reeth' 
b'Insecure Direct Object References in https://vimeo.com/forums'

04 May 2015

b'Vimeo' disclosed a bug submitted by b'reeth' 
b'Insecure Direct Object References that allows to read any comment (even if it should be private)'

04 May 2015

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'HTTP Response Splitting (CRLF injection) due to headers overflow'

04 May 2015

b'Snapchat' disclosed a bug submitted by b'zero' 
b"Captcha Bypass in Snapchat's Geofilter Submission Process"

04 May 2015

b'Block.io' disclosed a bug submitted by b'sincerehacker' 
b'Various Low level Vulnerabilities'

03 May 2015

b'Python' disclosed a bug submitted by b'pakt_' 
b'Multiple use after free bugs in heapq module'

03 May 2015

b'Python' disclosed a bug submitted by b'pakt_' 
b'Multiple use after free bugs in json encoding'

03 May 2015

b'Python' disclosed a bug submitted by b'pakt_' 
b'Use after free in get_filter'

03 May 2015

b'Mail.Ru' disclosed a bug submitted by b'ddworken' 
b'XSS in realty.mail.ru'

02 May 2015

b'Mail.Ru' disclosed a bug submitted by b'ddworken' 
b'XSS in ad.mail.ru'

02 May 2015

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Homograph attack'

02 May 2015

b'Vimeo' disclosed a bug submitted by b'niyaax' 
b'Post in private groups after getting removed'

01 May 2015

1 ... 694 695 696 697 698 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM