Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b'Enumeration of users'

03 Oct 2014
wont-fix

b'Slack' disclosed a bug submitted by b'shahmeer_amir' 
b'HTTP Strict Transport Policy not enabled on newly made accounts'

03 Oct 2014

b'Mail.Ru' disclosed a bug submitted by b'quistertow' 
b'Flash XSS in http://lingvo.mail.ru'

02 Oct 2014

b'Square' disclosed a bug submitted by b'avlidienbrunn' 
b'Blind SQL injection in www.bookfresh.com'

02 Oct 2014

b'Twitter' disclosed a bug submitted by b'karthik29' 
b'HTML form without CSRF protection at http://try.crashlytics.com/enterprise/'

02 Oct 2014

b'Phabricator' disclosed a bug submitted by b'shahmeer_amir' 
b'Password Policy issue'

02 Oct 2014
wont-fix

b'IRCCloud' disclosed a bug submitted by b'mantis' 
b'Persistent Cross Site Scripting within the IRCCloud Pastebin '

01 Oct 2014

b'IRCCloud' disclosed a bug submitted by b'mantis' 
b'Unvalidated Channel names causes IRC Command Injection'

01 Oct 2014

b'The Internet' disclosed a bug submitted by b'someonenobbd' 
b"GNU Bourne-Again Shell (Bash) 'Shellshock' Vulnerability"

01 Oct 2014

b'ExpressionEngine' disclosed a bug submitted by b'charan' 
b'Cross Site Scripting (Stored) '

30 Sep 2014

b'Twitter' disclosed a bug submitted by b'secgeek' 
b'Delete Credit Cards from any Twitter Account in ads.twitter.com [New Vulnerability]'

30 Sep 2014

b'Uzbey LLC' disclosed a bug submitted by b'shahriyar' 
b'Mass invitation send'

29 Sep 2014
wont-fix

b'CloudFlare' disclosed a bug submitted by b'sergeybelove' 
b"User's data leak"

28 Sep 2014

b'Mail.Ru' disclosed a bug submitted by b'bigbear' 
b'????????? ????? ??????? ?? ???? ??????????????? ??????? ? ???????? /home/berserk-online.com/public_html/forum/Themes/berserker/Profile.template.php'

27 Sep 2014

b'Twitter' disclosed a bug submitted by b'secanaly' 
b'Stored xss'

27 Sep 2014

b'HackerOne' disclosed a bug submitted by b'christypriory' 
b'Password Reset Bug'

25 Sep 2014

b'Coinbase' disclosed a bug submitted by b'michiel' 
b'Bypassing 2FA for BTC transfers'

25 Sep 2014

b'HackerOne' disclosed a bug submitted by b'anand_m' 
b'Change Any username and profile link in hackerone'

25 Sep 2014

b'C2FO' disclosed a bug submitted by b'faisalahmed' 
b'All Active user sessions should be destroyed when user change his password!'

23 Sep 2014

b'Twitter' disclosed a bug submitted by b'vineet' 
b'Captcha bypass with extension at http://www.mopub.com/about/contact/'

22 Sep 2014
wont-fix

1 ... 700 701 702 703 704 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM