Bug Bounty | Entries from January 2014

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

MARKPLAATS.nl Bug Bounty Program #Bounty received

Posted by Stefan Schurtz on Friday, January 17. 2014

Today I received my bounty for a vulnerability, which I reported for the MARKPLAATS.nl Bug Bounty Program.

And here it is … my ‘ebay classifieds whitehat’ :-)

Really nice, isnt’t it :-) ?

In my opinion the MARKPLAATS.nl bug bounty program is one of the good ones, fast feedback and a nice contact, too.

By the way, the vulnerability is not fixed yet, so I will publish the advisory to a later time.

Yahoo Bug Bounty Program Vulnerability #2 Open Redirect

Posted by on Saturday, January 11. 2014

In Dec ’13 I reported a Open Redirect (and two other vulnerabilities, first in Nov ’13) to the Yahoo Bug Bounty Program. Sadly, I’ve got no response or feedback for any of this issues, so I wrote a new message to them (this time via email).

Last week they told me that Open redirects are no longer in scope of the bug bounty programm :-/

So here is my advisory for this issue:

Continue reading "Yahoo Bug Bounty Program Vulnerability #2 Open Redirect"