Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'gadhiyasavan' 
b'Abuse of "Remember Me" functionality.'

29 Dec 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'melvin' 
b'Cross-site Scripting in mailing (username)'

27 Dec 2014

b'QIWI' disclosed a bug submitted by b'smiegles' 
b'[static.qiwi.com] XSS proxy.html'

27 Dec 2014

b'Twitter' disclosed a bug submitted by b'dreamzz' 
b'Options Method Enabled'

26 Dec 2014
wont-fix

b'Twitter' disclosed a bug submitted by b'dreamzz' 
b'Option Method Enabled on web server'

25 Dec 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'hasanemrebeyy' 
b'Relateiq SSLv3 deprecated protocol vulnerability.'

24 Dec 2014

b'Twitter' disclosed a bug submitted by b'atom' 
b'XSS in fabric.io'

23 Dec 2014

b'Eobot' disclosed a bug submitted by b'dreamzz' 
b'OPTIONS METHOD ENABLED '

23 Dec 2014
wont-fix

b'Slack' disclosed a bug submitted by b'4lemon' 
b'SSRF on https://whitehataudit.slack.com/account/photo'

21 Dec 2014

b'Square' disclosed a bug submitted by b'4lemon' 
b'Reflected XSS in widget script thru cookie'

21 Dec 2014

b'QIWI' disclosed a bug submitted by b'mohdhaji87' 
b'Code for registration of qiwi account is not coming even after a long interval of time for Indian mobile number'

21 Dec 2014
wont-fix

b'Openfolio' disclosed a bug submitted by b'dreamzz' 
b'Options Method Enabled'

21 Dec 2014
wont-fix

b'QIWI' disclosed a bug submitted by b'wesecureapp' 
b'[qiwi.com] /oauth/confirm.action XSS'

20 Dec 2014

b'Square' disclosed a bug submitted by b'adrianbelen' 
b'square google calendar integration CSRF,https://squareup.com/appointments/business/settings(state parameter not checking properly)'

18 Dec 2014

b'QIWI' disclosed a bug submitted by b'bitquark' 
b'[send.qiwi.ru] Soap-based XXE vulnerability /soapserver/ '

18 Dec 2014

b'Twitter' disclosed a bug submitted by b'avicoder' 
b'Open redirection in fabric.io'

18 Dec 2014

b'QIWI' disclosed a bug submitted by b'psych0tr1a' 
b'[send.qiwi.ru] XSS at auth?login='

17 Dec 2014

b'Phabricator' disclosed a bug submitted by b'ravip' 
b'Content injection '

15 Dec 2014
wont-fix

b'Python' disclosed a bug submitted by b'guido' 
b'PyUnicode_FromFormatV crasher'

15 Dec 2014

b'Twitter' disclosed a bug submitted by b'geekboy' 
b'BROKEN AUTHENTICATION IN MOBILE VERIFICATION '

14 Dec 2014
wont-fix

1 ... 728 729 730 731 732 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM