Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Vimeo' disclosed a bug submitted by b'niyaax' 
b'Post in private groups after getting removed'

01 May 2015

b'Vimeo' disclosed a bug submitted by b'prashanthvarma' 
b'[URGENT ISSUE] Add or Delete the videos in watch later list of any user .'

01 May 2015

b'Slack' disclosed a bug submitted by b'satishb3' 
b'Team admin can change unauthorized team setting (require_at_for_mention)'

30 Apr 2015

b'itBit Exchange' disclosed a bug submitted by b'harshafriend4all' 
b'confirmation bypass of 2FA devices while they are deleting '

29 Apr 2015

b'itBit Exchange' disclosed a bug submitted by b'harshafriend4all' 
b'secretKey for OTP , is getting leaked in response of a delete request !'

29 Apr 2015

b'HackerOne' disclosed a bug submitted by b'redkan' 
b'csrf bug'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'uname' 
b'Anti-MIME-Sniffing header X-Content-Type-Options header has not been set.'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Denail of service'

28 Apr 2015

b'HackerOne' disclosed a bug submitted by b'prakharprasad' 
b'Logic Issue with Reputation: Boost Reputation Points'

28 Apr 2015

b'Twitter' disclosed a bug submitted by b'gepeto42' 
b"iOS App can establish Facetime calls without user's permission"

27 Apr 2015

b'Twitter' disclosed a bug submitted by b'avicoder' 
b'Twitter Ads Campaign information disclosure through admin without any authentication.'

25 Apr 2015

b'Vimeo' disclosed a bug submitted by b'satishb3' 
b"A user can add videos to other user's private groups"

23 Apr 2015

b'Dropbox' disclosed a bug submitted by b'haquaman' 
b'SSRF vulnerablity in app webhooks'

23 Apr 2015

b'HackerOne' disclosed a bug submitted by b'killr0x33d' 
b'Open-redirect on hackerone.com'

23 Apr 2015

b'HackerOne' disclosed a bug submitted by b'deepak_das' 
b'Missing spf flags for hackerone.com'

23 Apr 2015

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'HTTP Response Splitting (CRLF injection) in report_story'

21 Apr 2015

b'Python' disclosed a bug submitted by b'hugbounter' 
b'Tokenizer crash when processing undecodable source code'

21 Apr 2015

b'Phabricator' disclosed a bug submitted by b'candux' 
b'XSS with Time-of-Day Format'

19 Apr 2015

b'Shopify' disclosed a bug submitted by b'shhnjk' 
b'comment out causes information disclosure'

19 Apr 2015

b'Vimeo' disclosed a bug submitted by b'michelgaschet' 
b'Vimeo + & Vimeo PRO Unautorised Tax bypass'

18 Apr 2015

1 ... 716 717 718 719 720 ... 763

BY DENIS WERNER - @NOBBD - IMPRESSUM