Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'itBit Exchange' disclosed a bug submitted by b'harshafriend4all' 
b'confirmation bypass of 2FA devices while they are deleting '

29 Apr 2015

b'itBit Exchange' disclosed a bug submitted by b'harshafriend4all' 
b'secretKey for OTP , is getting leaked in response of a delete request !'

29 Apr 2015

b'HackerOne' disclosed a bug submitted by b'redkan' 
b'csrf bug'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'uname' 
b'Anti-MIME-Sniffing header X-Content-Type-Options header has not been set.'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Denail of service'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'prakharprasad' 
b'Logic Issue with Reputation: Boost Reputation Points'

28 Apr 2015

b'Twitter' disclosed a bug submitted by b'gepeto42' 
b"iOS App can establish Facetime calls without user's permission"

27 Apr 2015

b'Twitter' disclosed a bug submitted by b'avicoder' 
b'Twitter Ads Campaign information disclosure through admin without any authentication.'

25 Apr 2015

b'Vimeo' disclosed a bug submitted by b'satishb3' 
b"A user can add videos to other user's private groups"

23 Apr 2015

b'Dropbox' disclosed a bug submitted by b'haquaman' 
b'SSRF vulnerablity in app webhooks'

23 Apr 2015

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Open-redirect on hackerone.com'

23 Apr 2015

b'HackerOne' disclosed a bug submitted by b'deepak_das' 
b'Missing spf flags for hackerone.com'

23 Apr 2015

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'HTTP Response Splitting (CRLF injection) in report_story'

21 Apr 2015

b'Python' disclosed a bug submitted by b'hugbounter' 
b'Tokenizer crash when processing undecodable source code'

21 Apr 2015

b'Phabricator' disclosed a bug submitted by b'candux' 
b'XSS with Time-of-Day Format'

19 Apr 2015

b'Shopify' disclosed a bug submitted by b'shhnjk' 
b'comment out causes information disclosure'

19 Apr 2015

b'Vimeo' disclosed a bug submitted by b'michelgaschet' 
b'Vimeo + & Vimeo PRO Unautorised Tax bypass'

18 Apr 2015

b'Vimeo' disclosed a bug submitted by b'avlidienbrunn' 
b'URGENT - Subdomain Takeover on status.vimeo.com due to unclaimed domain pointing to statuspage.io'

18 Apr 2015

b'Shopify' disclosed a bug submitted by b'sappi' 
b'IDOR expire other user sessions'

17 Apr 2015

b'Dropbox' disclosed a bug submitted by b'haquaman' 
b'XSS in version history of an HTML file in a shared folder'

17 Apr 2015
wont-fix

1 ... 697 698 699 700 701 ... 744

BY DENIS WERNER - @NOBBD - IMPRESSUM