Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LibSass' disclosed a bug submitted by b'richo' 
b'type confusion in Sass::ParserState::ParserState(Sass::ParserState const&)'

11 Jun 2015

b'OpenSSL' disclosed a bug submitted by b'ctz' 
b'Malformed ECParameters causes infinite loop'

11 Jun 2015

b'Coin.Space' disclosed a bug submitted by b'shubham' 
b'SMTP protection not used'

10 Jun 2015

b'HackerOne' disclosed a bug submitted by b'ashesh' 
b'Potential denial of service in hackerone.com/<program>/reward_settings'

10 Jun 2015

b'HackerOne' disclosed a bug submitted by b'ashesh' 
b'mailto: link injection on https://hackerone.com/directory'

10 Jun 2015

b'Shopify' disclosed a bug submitted by b'bobrov' 
b'[www.*.myshopify.com] CRLF Injection'

10 Jun 2015

b'Shopify' disclosed a bug submitted by b'4lemon' 
b'Force 500 Internal Server Error on any shop (for one user)'

09 Jun 2015

b'Shopify' disclosed a bug submitted by b'killr0x33d' 
b'XSS on support.shopify.com'

09 Jun 2015

b'Dropbox' disclosed a bug submitted by b'missoum1307' 
b'XSS in dropbox main domain '

09 Jun 2015

b'Udemy' disclosed a bug submitted by b'mthirup' 
b'teach.udemy.com log poison vulnerability through wordpress debug.log being publically available'

09 Jun 2015

b'Shopify' disclosed a bug submitted by b'nismo' 
b'XSS in myshopify.com Admin site in TAX Overrides'

09 Jun 2015

b'MapLogin' disclosed a bug submitted by b'dia2diab' 
b'Not Completed Accounts Take Over (Urgent bug)'

09 Jun 2015

b'HackerOne' disclosed a bug submitted by b'janpaul123' 
b'Report title autocompletion'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'robots-txt' 
b'Flawed account creation process allows registration of usernames corresponding to existing file names'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'tomvg' 
b'Privilege escalation..., or not?!'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'mikebrooks' 
b'SPF whitelist of mandrill leads to email forgery'

08 Jun 2015

b'HackerOne' disclosed a bug submitted by b'antrax' 
b'Reopen Disable Accounts/ Hidden Access After Disable'

08 Jun 2015

b'concrete5' disclosed a bug submitted by b'egix' 
b'Multiple Reflected Cross Site Scripting Vulnerabilities in Concrete5 version 5.7.3.1'

06 Jun 2015

b'concrete5' disclosed a bug submitted by b'egix' 
b'Sendmail Remote Code Execution Vulnerability in Concrete5 version 5.7.3.1'

06 Jun 2015

b'WordPoints' disclosed a bug submitted by b'vkc' 
b'Rank Creation function not validating user inputs.'

04 Jun 2015
wont-fix

1 ... 702 703 704 705 706 ... 753

BY DENIS WERNER - @NOBBD - IMPRESSUM