Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Yahoo!' disclosed a bug submitted by b'cliffordtrigo' 
b'XSS in Yahoo! Web Analytics'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'Significant Information Disclosure/Load balancer access, http://extprodweb11.cc.gq1.yahoo.com/, 4/8/14, #SpringClean'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'reflected XSS, http://extprodweb11.cc.gq1.yahoo.com/, 4/8/14, #SpringClean'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'REMOTE CODE EXECUTION/LOCAL FILE INCLUSION/XSPA/SSRF, view-source:http://sb*.geo.sp1.yahoo.com/, 4/6/14, #SpringClean'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'invite1.us2.msg.vip.bf1.yahoo.com/ - CSRF/email disclosure'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'https://caldav.calendar.yahoo.com/ - XSS (STORED) '

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'information disclosure (LOAD BALANCER + URI XSS)'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'nnwakelam' 
b'Loadbalancer + URI XSS #3'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'cmaruti' 
b'Authorization issue on creative.yahoo.com'

06 Aug 2014

b'Localize' disclosed a bug submitted by b'brook2' 
b'full path disclosure from false language'

06 Aug 2014

b'Localize' disclosed a bug submitted by b'tarzxvf' 
b'Bug on registration as new Translator user'

06 Aug 2014

b'Yahoo!' disclosed a bug submitted by b'the_pr0ph3t' 
b'Yahoo! Reflected XSS'

06 Aug 2014

b'Phabricator' disclosed a bug submitted by b'sehacure' 
b'Broken Authentication and Session Management'

05 Aug 2014

b'Twitter' disclosed a bug submitted by b'mohaab007' 
b'password sent over HTTP'

05 Aug 2014

b'Mavenlink' disclosed a bug submitted by b'niks' 
b'privilege escalation'

05 Aug 2014

b'Twitter' disclosed a bug submitted by b'simon90' 
b'Cookie not marked as secure.'

04 Aug 2014

b'Twitter' disclosed a bug submitted by b'guido' 
b'XSS vulnerability in video player page'

02 Aug 2014

b'DC Compendium' disclosed a bug submitted by b'rodgodalle' 
b'Multiple Full Path Disclosure (FPD) Vulnerability on Dccompendium.com domain'

02 Aug 2014

b'DC Compendium' disclosed a bug submitted by b'huzaifa_82' 
b'Clickjacking: X-Frame-Options header missing'

01 Aug 2014

b'DC Compendium' disclosed a bug submitted by b'atom' 
b'Login CSRF'

01 Aug 2014
wont-fix

1 ... 712 713 714 715 716 ... 737

BY DENIS WERNER - @NOBBD - IMPRESSUM