Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Revert' disclosed a bug submitted by b'internetwache' 
b'Missing SPF header on revert.io'

18 Jan 2015

b'QIWI' disclosed a bug submitted by b'fishumu' 
b'Metadata in hosted files is disclosing Usernames, Printers, paths, admin guides. emails'

18 Jan 2015
wont-fix

b'Openfolio' disclosed a bug submitted by b'harshafriend4all' 
b'xss in /browse/contacts/'

14 Jan 2015

b'Phabricator' disclosed a bug submitted by b'nullsub' 
b'Phabricator Phame Blog Skins Local File Inclusion'

14 Jan 2015

b'Informatica' disclosed a bug submitted by b'dreamzz' 
b'Missing SPF for informatica.com'

12 Jan 2015
wont-fix

b'Slack' disclosed a bug submitted by b'fransrosen' 
b'Facebook Takeover using Slack using 302 from files.slack.com with access_token'

11 Jan 2015

b'Mail.Ru' disclosed a bug submitted by b'4lemon' 
b'Stored XSS on http://top.mail.ru'

10 Jan 2015

b'Phabricator' disclosed a bug submitted by b'nullsub' 
b'Phabricator Diffusion application allows unauthorized users to delete mirrors'

09 Jan 2015

b'Vimeo' disclosed a bug submitted by b'artem' 
b'APIs for channels allow HTML entities that may cause XSS issue'

08 Jan 2015

b'The Internet' disclosed a bug submitted by b'isciurus' 
b'libcurl: URL request injection'

08 Jan 2015

b'Twitter' disclosed a bug submitted by b'sappi' 
b'No rate limiting on creating lists'

06 Jan 2015
wont-fix

b'Twitter' disclosed a bug submitted by b'batuhan' 
b'Notifications can mark as read by CSRF'

03 Jan 2015
wont-fix

b'Uzbey LLC' disclosed a bug submitted by b'anonymous_india' 
b' Suck My Motherfucking Dick'

01 Jan 2015
wont-fix

b'Block.io' disclosed a bug submitted by b'shivathegame' 
b'Bypassed or command injection'

01 Jan 2015
wont-fix

b'Twitter' disclosed a bug submitted by b'shivathegame' 
b' Homograph attack. '

01 Jan 2015
wont-fix

b'Twitter' disclosed a bug submitted by b'missoum1307' 
b'URGENT - Subdomain Takeover on users.tweetdeck.com , the same issue of report #32825'

01 Jan 2015

b'PHP' disclosed a bug submitted by b'geeknik' 
b'out of bounds read crashes php-cgi'

30 Dec 2014

b'Twitter' disclosed a bug submitted by b'gadhiyasavan' 
b'Abuse of "Remember Me" functionality.'

29 Dec 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'melvin' 
b'Cross-site Scripting in mailing (username)'

27 Dec 2014

b'QIWI' disclosed a bug submitted by b'smiegles' 
b'[static.qiwi.com] XSS proxy.html'

27 Dec 2014

1 ... 704 705 706 707 708 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM