Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'mazengamal' 
b'Team member invitations to sandboxed teams are not invalidated consistently'

28 Mar 2015

b'itBit Exchange' disclosed a bug submitted by b'shahmeer_amir' 
b'Leakage of sensitive wallet tokens to third party sites'

28 Mar 2015

b'Mail.Ru' disclosed a bug submitted by b'zoczus' 
b'Same Origin Policy bypass'

27 Mar 2015

b'Twitter' disclosed a bug submitted by b'xorb' 
b'[Stored XSS] vine.co - profile page'

26 Mar 2015

b'Phabricator' disclosed a bug submitted by b'agarri_fr' 
b'SSRF vulnerability (access to metadata server on EC2 and OpenStack)'

26 Mar 2015

b'Mavenlink' disclosed a bug submitted by b'shahmeer_amir' 
b'DNS load balancing not enabled'

25 Mar 2015
wont-fix

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player Out-of-Bound Access Vulnerability'

25 Mar 2015

b'Flash' disclosed a bug submitted by b'biloulehibou' 
b'Race condition in workers may cause an exploitable double free by abusing bytearray.compress() '

25 Mar 2015

b'Flash' disclosed a bug submitted by b'biloulehibou' 
b'Use after free during the StageVideoAvailabilityEvent can result in arbitrary code execution'

25 Mar 2015

b'Flash' disclosed a bug submitted by b'biloulehibou' 
b'Use After Free in Flash MessageChannel.send can cause arbitrary code execution'

25 Mar 2015

b'HackerOne' disclosed a bug submitted by b'siddiki' 
b'Restrict any user from logging into his account.'

24 Mar 2015

b'Robocoin' disclosed a bug submitted by b'anshuman_bh' 
b'Frictionless Transferring of Wallet Ownership'

23 Mar 2015

b'Robocoin' disclosed a bug submitted by b'yassineaboukir' 
b'CSRF token leakage'

23 Mar 2015
wont-fix

b'HackerOne' disclosed a bug submitted by b'smiegles' 
b'"learn more here", reward email - domain expired.'

23 Mar 2015

b'Twitter' disclosed a bug submitted by b'ashwarya_me' 
b'Singup Page HTML Injection Vulnerability'

22 Mar 2015

b'Mail.Ru' disclosed a bug submitted by b'ddworken' 
b'XSS Vulnerability in cfire.mail.ru/screen/1/'

22 Mar 2015

b'Square' disclosed a bug submitted by b'shahmeer_amir' 
b'Redirecting a victim elsewhere through shopseen 0auth'

20 Mar 2015
wont-fix

b'Dropbox' disclosed a bug submitted by b'basavagowda' 
b'unknow files Upload in profile photo'

20 Mar 2015
wont-fix

b'OpenSSL' disclosed a bug submitted by b'geeknik' 
b'Segmentation fault for invalid PSS parameters'

19 Mar 2015

b'Vimeo' disclosed a bug submitted by b'pranav_hivarekar' 
b'CRITICAL vulnerability - Insecure Direct Object Reference - Unauthorized access to `Videos` of Channel whose privacy is set to `Private`.'

18 Mar 2015

1 ... 721 722 723 724 725 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM