Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'huzaifa_82' 
b'Gain reputation by creating a duplicate of an existing report'

14 Aug 2015

b'Zopim' disclosed a bug submitted by b'deepak_das' 
b'Security Missconfiguration in Autologin '

14 Aug 2015

b'RelateIQ' disclosed a bug submitted by b'mtk' 
b'PoodleBleed'

13 Aug 2015

b'WePay' disclosed a bug submitted by b'yassineaboukir' 
b'Critical : Account removing using CSRF attack'

13 Aug 2015

b'Twitter' disclosed a bug submitted by b'anshuman_bh' 
b'Improper Verification of email address while saving Account Settings'

13 Aug 2015

b'Airbnb' disclosed a bug submitted by b'alokmenghrajani' 
b'authenticity_token is not random across page loads'

12 Aug 2015

b'Zaption' disclosed a bug submitted by b'bugs3ra' 
b'XSS - Gallery Search Listing'

12 Aug 2015

b'Shopify' disclosed a bug submitted by b'skavans' 
b'Reflected XSS in chat'

11 Aug 2015

b'Shopify' disclosed a bug submitted by b'salmankhanchampion' 
b'TCP Source Port Pass Firewall'

11 Aug 2015

b'Gratipay' disclosed a bug submitted by b'faisalahmed' 
b'Authentication errors in server side validaton of E-MAIL'

10 Aug 2015

b'Twitter' disclosed a bug submitted by b'cqoicebordel' 
b'Bad extended ascii handling in HTTP 301 redirects of t.co'

09 Aug 2015

b'Mavenlink' disclosed a bug submitted by b'bugs3ra' 
b'Open/Unvalidated Redirect Issue'

06 Aug 2015

b'Keybase' disclosed a bug submitted by b'alihassanghori' 
b'Content Sniffing not disabled'

05 Aug 2015

b'HackerOne' disclosed a bug submitted by b'jessescitech' 
b'Number of invited researchers disclosed as part of JSON search response'

05 Aug 2015

b'PHP' disclosed a bug submitted by b'seanhn' 
b'Dangling pointer in the unserialization of ArrayObject items'

05 Aug 2015

b'PHP' disclosed a bug submitted by b'ryat' 
b'Multiple Use After Free Vulnerabilites in unserialize()'

05 Aug 2015

b'PHP' disclosed a bug submitted by b'stewie' 
b'Files extracted from archive may be placed outside of destination directory'

05 Aug 2015

b'Keybase' disclosed a bug submitted by b'paresh_v1n1' 
b'No rate limiting for sensitive actions (like "forgot password") enables user enumeration'

04 Aug 2015

b'PHP' disclosed a bug submitted by b'andreapalazzo' 
b'curl_setopt_array() type confusion'

04 Aug 2015

b'PHP' disclosed a bug submitted by b'dimitri' 
b'Arbitrary code execution in str_ireplace function'

04 Aug 2015

1 ... 704 705 706 707 708 ... 761

BY DENIS WERNER - @NOBBD - IMPRESSUM