VULNERABILITY MAGAZIN
2014
(40)
German Telekom Bug Bounty Program - Scope changes! Exclude of 3 Bug Types
PayPal Inc Bug Bounty - Researcher discovered filter bypass & persistent input validation issue 2014Q2
Remote Code Execution Vulnerability discovered in Yahoo, Microsoft MSN & Orange - Bug Bounty Ebrahim Hegazy
List of Bug Bounty Programs & Security Reward Programs became available in April! (NEW UPDATES!)
PayPal Bug Bounty - Ethernet Portal Backend Vulnerability in User Profile Values
Pakistani Researcher discovered three 0day remote Vulnerabilities in Yahoo! Inc. Online Services
SyScan Conference in Bejing China provides Tesla Model S Car to PenTesters - Bug Bounty Reward of 10.000$
Barracuda Networks Bug Bounty Program - Message Archiver 650 v3.2 Persistent Vulnerability BNSEC:703
Barracuda Networks patched BNSEC-2398 Bulletin in Firewall Appliance Application
2 Filter Evasion Security Videos released - Barracuda Networks Bug Bounty Program
Bulletin BNSEC 1263 - Multiple Cross Site Vulnerabilities coordinated disclosed through Barracuda Networks
Ebay Magento fixed Application Side Vulnerability & Filter Bypass in ProStore
Oracle Corporation fixed Vulnerability in MyOracle Online-Service Application
PayPal Inc patched several Persistent Mail Encoding Vulnerabilities
Google Chrome & Engine - Company increased payment up to 15.000$
15.000$ to safe the Captain Crunch - John Draper Healthcare Campaign
Microsoft Yammer API - Filter Bypass & Persistent Vulnerabilities (PoC Video Demonstration)
Google Android Mobile Browser - Persistent Remote Vulnerability (PoC Video)
PayPal Inc - Mobile API vulnerable to restriction Auth Bypass Issue
Vulnerability Laboratory - Evolution Security announced to become a GmbH
Parallels Plesk v11.5.x - URL Protection Filter Bypass (Video Demonstration)
Apple iOS v8.0.2 - Silent Contact 0Day Vulnerability (Denial of Service)
Google Youtube - Persistent Cross Site Vulnerability (Demonstration Video)
Chaos Communication Congress (31C3) - 27. bis 30. Dec 2014, CCH, Hamburg
PayPal Inc fixed Filter Bypass & Profile Code Execution during Infrastructure Upgrades
300,000 USD reward to Hackers that crack the Telegram Encryption
CeBIT 2015 (d!conomy) - Heise offers Slots in Open Developer World
Best Bug Bounty Programs Competition & Voting runs well! (December 2014)
Ebay Inc Magento - Research Team discovered Bypass & Validation Vulnerability
F-Secure starts official Vulnerability Reward Program in November 2014
Facebook updates Terms & Policies of the Social Network - 1st January 2015
Barracuda Networks Bug Bounty Program is temporarily closed since 9th December
RelateIQ Bug Bounty Program - Persistent Signup Vulnerability & Mail Encoding Issue
Nasa Mars Orion Program - Researcher reveals Vulnerability in Boarding Pass to demonstrate violation
Whitehat Hacker discovered details of an application-side Facebook Studio Dashboard Vulnerability
Apple iOS v8.x - Message Context & Privacy Vulnerability demonstrated in Wickr App
IBackup v10.0.0.45 suffers from a local Privilege Escalation Vulnerability
Facebook Social Network - Privacy Issue disclosed to Bug Bounty Program by Whitehat
Wickr Desktop v2.2.1 Windows - Denial of Service Vulnerability (Demonstration Video)
31c3 2014 - SS7, SCADA , Iris Biometrics, EMV manipulation & Government Spionage
2015
(53)
Heroku Bug Bounty Program 2015 - Persistent Invitation Vulnerability
Bug Bounty Programs - Manufacturer Award 31st January 2015
Facebook Bug Bounty - Restriction Filter Bypass Vulnerability (ID 221374210)
LizardSquad DDoS Stresser - Multiple Vulnerabilities revealed to takeover DDoS Application
Facebook patched flaw within 9hours - XML Cross Domain Vulnerability
Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure ?
Announcement of Winners - Best Bug Bounty Program, Best Upcoming Program & Best Issue in 2014
Facebook Security - 12.500$ Bug Bounty reward to Security Researcher
Google starts new Vulnerability Research Grant-Program in 2015
Pandora FMS v5.1 SP1 starts to fix SQL Injection Vulnerability
Ebay Inc Magento 2015Q1 - Official Bug Bounty Program rewards Security Researcher
Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability
Ebay Xcom - Multiple Remote Vulnerabilities Patched!
Magento split up the Bug Bounty Program of Ebay - Begin 1st May!
Researcher discovers Zero-Day Vulnerability in Wordpress Plugin of Exploit DB
Microsoft starts the new Project Spartan Bug Bounty Program (22 April - 22 June)
Egyptian Workshop - Bug Bounty & Security Research
PayPal Inc Bug Bounty - JDWP Remote Code Execution Vulnerability
Grindr Account System - Session Auth Bypass Vulnerability (Video)
Bug Bounty Program Award Winners 2014 - Exclusive Interview by Microsoft & PayPal
Facebook 2015 (Video) - Filter Bypass & Unauthorized Exception Redirect Vulnerability
United Airlines Inc starts official Bug Bounty Program - Star Alliance Security
Eisbär SCADA - Persistent Software Vulnerability in Visualization Software
Hack in the Box | Amsterdam 2015 | HITB
1 Click Audio Software 2.3.6 (Video) - 2x ActiveX Buffer Overflow Vulnerabilities
Heroku Bug Bounty 2015 (API) - Re Auth Session Token Bypass Vulnerability
Hacker Attack on the German Parliament
Exploit Delivery via Steganography using Stegosploit Tool v0.2
ZTE ZXV10 W300 v3.1.0c_DR0 - Remote Session Delete Vulnerability
Ebay Inc coordinated patch of 3 Magento Vulnerabilities (IVE, XSS & CSRF)
Pinterest Bug Bounty 2015 - Persistent Vulnerability in Contact_Name (API)
PayPal creates new Bug Bounty Portal
FoxyCart Bug Bounty #1 - Filter Bypass & Persistent API Vulnerability
Apple App Store and iTunes Store - Filter Bypass & Persistent Invoice Web Vulnerability
Ferrari.com Simulationcenter - Remote Code Execution | PHP CGI Argument Injection
Tesla Increased the value of its Bug Bounty Program to $10,000
UBNT Bug Bounty #3 - Persistent Filename Vulnerability
Shopify | Buy Button | Persistent Embed POST Inject Vulnerability
Building Bridges between Europe and Asia - Meeting SecWk JinlongSec in China
PayPal Inc patched medium severity Cross Site Request Forgery Issue
PayPal Inc Bug Bounty 2015 - Stored Cross Site Vulnerability disclosed by Researcher
OwnCloud starts official Bug Bounty Program - Payments for valid Security Reports
PayPal Inc - 2FA & Security Approval Restriction Auth Bypass Session Vulnerability
Paypal Inc - Medium Severity Open Redirect Web Vulnerability fixed!
Flowdock API - Four Vulnerabilities Patched in a Batch
PayPal Inc Bug Bounty #117 - Filter Bypass & Remote Session Fixation Vulnerability
Microsoft starts .NET Core & ASP.NET Bug Bounty Program
Sparkasse ATM Vulnerability disclosed by German Researcher - Integration as Pilot Program
Mobile Application Security - Main Issues & Vulnerabilities
Adobe Premiere Clip v1.1.1 iOS - Filter Bypass & Persistent Software Vulnerability
CS:GO starts two offical Bug Bounty Programs - BlackJack & Heads or Tails
Apple Product Security Acknowledgements - Multiple Vulnerabilities
TOR Project - Official Bug Bounty Program in 2016
2016
(31)
Trend Micro Direct Pass - Filter Bypass & Persistent Cross Site Vulnerability
Apple iOS v9.2.1 - (Application Update Loop) Pass Code Bypass
Researcher uncovers multiple SQL Injection Vulnerabilities in the DPA Presseportal of NewsAktuell
Apache Sling FW v2.3.6 - Remote SlingPostServlet Exception Vulnerability
ifixit Bug Bounty Program 2016 Q1 - Multiple Vulnerabilities disclosed by Core Researcher
Hack the Pentagon - Cybersecurity Initiative of the Pentagon & Homeland Security
Apple iOS v9.2.1, v9.1 & v9.0 - Researcher disclosed multiple PassCode Protection Bypass Vulnerabilities
Mobidea starts new & official Bug Bounty Program in 2016
PayPal Inc Bug Bounty Program 2016 - New Vulnerability Uncovered by German Researcher
Hack the Pentagon Bug Bounty Program - Registration Activated 18th April since 16th May
iPhone 6S & Plus with 3D Touch vulnerable to new Passcode Bypass Vulnerability
Cyberoam Central Console v02.03.1 - Persistent Web Vulnerabilities
Bug Bounty Program Award Winners 2015 - Exclusive Interview by United Airlines & Facebook
MIT Security - Alpha Phase of Bug Bounty Program in April 2016
Hacking the Bugcrowd - Core Researcher scores in Main Program Site
Hack the Pentagon - More then 120 valid Security Vulnerabilities uncovered
Manchester City - Football Club hosts first Hackathon in July 2016
BMW Core Web Portal & ConnectedDrive - Exploitation of Car Configurations
Apple Cupertino announces to startup official Bug Bounty Program in 2016
Fortinet Patches Series of Remote Vulnerabilities in Appliance Products
Parse HTTP Host Header Attack - Redirect Bug
Critical Vulnerabilities in Sparkassen Bank Server discovered by Researchers
FaceDancer 21 Circuit Board - New Universal Case for PenTests
Vulnerability Lab hosts new Exclusive Bug Bounty & Responsible Disclosure Security Programs
Facebook API v2.1 hit by RFC6749 Open Redirect Attack Vulnerability
Mobidea starts Exclusive Bug Bounty Program in the Vulnerability Lab
Wickr Inc - When honesty disappears behind the VCP Mountain
Adobe Connect v9.5.6 - (CVE-2016-7851) Persistent Cross Site Vulnerability
Barracuda Networks adapts Bug Bounty Program to Cloud Product Services
US Military starts official "Hack the Army" Bug Bounty Program
Apple iOS 10.2 Notify Function vulnerable to Attacks via iDevice on iTunes & Appstore
2017
(6)
Telekom Cloud & Web SSO vulnerable to Bypass & Persistent XSS Attacks
Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability
Apple iOS v10.2 & v10.3 - SMS Reply Access Permission Vulnerability
Internet Security Conference 2017 by Qihoo 360
Google starts new - Security Reward Program for Android Apps
Edward Snowden free speech at JBFone - Data Security & Privacy
2018
(15)
Wickr Inc - App Clock & Message Deletion Glitch
Banknotes Misproduction security & biometric weakness
Intel expands the own Bug Bounty Program for Security Researchers
PayPal Inc Updates the Bug Bounty Program with Venmo Payments Services
PayPal Inc Increases Bug Bounty Payments in 2018 up to 30.000$
Lab Researcher discovered Microsoft Skype Denial of Service Vulnerability
AT&T Corporation - Lab uncovers new details about BizCircle Vulnerabilities
New HackRF Case for Devs & Pentesters Released (ABS & PLA)
New Bug Bounty Program for Identity Technologie by Microsoft
Hacker Injects Arbitrary Codes to Main Lead Database of Adobe Systems
Mozilla's New ASan Nightly Build Project Bug Bounty Program 2018
New Banana PI R1 SD V3 Case for Devs & PenTesters Available
Google Expands Vulnerability Reward Program - Combat Platform Abuse in 2018
Microsoft BingPlaces Business - (url) Redirect Vulnerability
Apple iOS 12.0 - 12.1.1 - PassCode Bypass Vulnerability
2019
(7)
Telekom Magenta Musik 360 - Multiple Cross Site Scripting Vulnerabilities
Apple extends exisiting private bug bounty program at the end of the year
GPSRP pays researchers for reporting abusiv google playstore apps
Imperial & Dabman Internet Radio - Undocumented Telnetd & Code Execution
Skype v8.49.0.49 Export History v7 - Persistent Web Vulnerability
Zero Day Vulnerability in Deutsche Bahn Ticket Machine Series System uncovered
Apple launches public Bug Bounty Program and delights Security Community
2020
(7)
Microsoft starts Xbox & Xbox Live Bug Bounty Program
Bundeswehr Career Page - Weak spot permanently closed
Microsoft Windows 2012 R2 (x64) - (MMC) Local DoS Vulnerability
Advanced Persistent Threat Golden_hands - Digital Bank Robbery of the Year 2020
Vulnerability in LANCOM Systems Wireless Controller Series uncovered
Sparkasse Safe - Two Functions One Token to Go
German Bundeswehr starts own Responsible Disclosure Program (VDPBw)
2021
(5)
Ebay Inc Identity Security Check Default PIN in 2021
MSRC extends Bug Bounty Program for Microsoft Teams
Google Upgrades VRP Bug Bounty Platform
BMW Mail - Persistent Validation Vulnerability
Bundeswehr Generalmajor officially acknowledges Whitehat for Responsible Disclosure Activities
2022
(1)
Rhein Ruhr Express (RRX) - DNS Cache Snooping Vulnerability on Wifi Hotspot
2023
(1)
Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability
