Github Account hijack through broken link in developer.twitter.com Analysed #1031321 Valid Input Validation and Logic High 2021-02-04 – 222 Takeover of Twitter-owned domain at mobileapplinking.com Analysed #321699 Valid Input Validation and Logic None 2019-02-28 – 159 Ability to perform actions (Tweet, Retweet, DM) and other actions, unauthenticated, on any account with SMS enabled. Analysed #470749 Valid Input Validation and Logic Critical 2019-09-26 – 106 Ability to getting Twitter Blue verified badge without purchase it #1841064 Duplicate Input Validation and Logic Medium 2024-02-22 – 85 Subdomain takeover of images.crossinstall.com Analysed #1406335 Valid Input Validation and Logic High 2022-01-05 – 71 Bypassing x profile verification to receive instant blue checkmark and unlimited profile changes Analysed #2257374 Valid Input Validation and Logic Low 2024-03-26 $250 60 Opportunity to obtain private tweets through search widget preview caches Analysed #263760 Valid Input Validation and Logic – 2017-11-11 $1,120 48 Bypass t.co link shortener in Twitter direct messages Analysed #1148548 Valid Input Validation and Logic Low 2021-05-18 – 44 Delete direct message history without access the proper conversation_id Analysed #666632 Valid Input Validation and Logic Low 2020-11-20 $560 33 [Bypass fixed #664038 and #519059] Application settings change settings that have been set by the user Analysed #712344 Valid Input Validation and Logic Medium 2021-07-13 – 27 Twitter Source Label allow 'mongolian vowel separator' U+180E (app name) #785243 Valid Input Validation and Logic Low 2020-02-21 – 19 No Rate Limit in email leads to huge Mass mailings #297359 Valid Input Validation and Logic Low 2018-06-01 – 19 Global defaming of any twitter user #434689 N/A Input Validation and Logic Critical 2018-12-06 – 3 Opportunity to post hidden comments #434202 Informative Input Validation and Logic Critical 2018-12-11 – 2