Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'geekboy' 
b'BROKEN AUTHENTICATION IN MOBILE VERIFICATION '

14 Dec 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'kamil_hism' 
b'localStorage ?? ???????? ????? ??????'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'psych0tr1a' 
b'Time based sql injection'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'mohank' 
b'Content Spoofing vulnerability in Mail.ru mobile'

10 Dec 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'4lemon' 
b'XSS in https://e.mail.ru/cgi-bin/lstatic (Limited use)'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'4lemon' 
b'Stored XSS on http://cards.mail.ru'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'4lemon' 
b'XXE and SSRF on webmaster.mail.ru'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'4lemon' 
b'Reflected XSS connect.mail.ru (IE6-IE8)'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'reactors08' 
b'XSS via .eml file'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'reactors08' 
b'touch.mail.ru XSS via message id'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'c37hun' 
b'OpenSSL HeartBleed (CVE-2014-0160)'

10 Dec 2014

b'Mail.Ru' disclosed a bug submitted by b'bigbear' 
b'????????????? ??????????'

10 Dec 2014

b'Slack' disclosed a bug submitted by b'jobert' 
b'Data exports stored on S3 can be scraped easily'

09 Dec 2014

b'HackerOne' disclosed a bug submitted by b'melvin' 
b'Breaking Bugs as team member'

09 Dec 2014

b'Eobot' disclosed a bug submitted by b'surgent10cross' 
b'IDOR on https://www.eobot.com/paypal'

08 Dec 2014
wont-fix

b'Greenhouse.io' disclosed a bug submitted by b'ashesh' 
b'SMTP protection not used (please read carefully )'

07 Dec 2014
wont-fix

b'InVision' disclosed a bug submitted by b'internetwache' 
b'Backup of wordpress configuration file found. Leaking database users/passwords'

06 Dec 2014

b'Block.io' disclosed a bug submitted by b'ashesh' 
b'SMPT Protection not used, I can hijack your email server.'

06 Dec 2014

b'Twitter' disclosed a bug submitted by b'avram' 
b'DOM Cross-Site Scripting ( XSS )'

03 Dec 2014

b'Eobot' disclosed a bug submitted by b'psych0tr1a' 
b'Multiple information disclosure'

01 Dec 2014
wont-fix

1 ... 702 703 704 705 706 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM