[Studio.twitter.com] See someone else pics Analysed #164649 Valid Authentication – 2017-06-22 – 84 Ability to see hidden likes Analysed #2140960 Valid Access Control Medium 2024-05-10 – 83 Html Injection and Possible XSS in sms-be-vip.twitter.com Analysed #150179 Valid Cross-site Scripting – 2016-08-28 – 83 Incorrect details on OAuth permissions screen allows DMs to be read without permission Analysed #434763 Valid Information Disclosure Medium 2018-12-14 $2,940 80 [dev.twitter.com] XSS and Open Redirect Analysed #260744 Valid No weakness recorded Medium 2017-09-29 $1,120 75 CSRF on Periscope Web OAuth authorization endpoint Analysed #215381 Valid Cross-Site Request Forgery – 2017-07-26 – 74 Multiple XSS on account settings that can hijack any users in the company. Analysed #503298 Valid Cross-site Scripting Critical 2019-04-01 $700 73 Subdomain takeover of images.crossinstall.com Analysed #1406335 Valid Input Validation and Logic High 2022-01-05 – 71 Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links Analysed #1032610 Valid Other weaknesses Medium 2022-12-29 $560 70 Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co Analysed #1096560 Valid Insecure Direct Object Reference Critical 2021-05-26 – 67 Protected tweets exposure through the URL Analysed #491473 Valid Information Disclosure High 2019-04-19 $560 67 Denial of Service [Chrome] Analysed #921286 Valid Denial of Service Medium 2020-07-24 $560 66 Multiple DOMXSS on Amplify Web Player Analysed #88719 Valid Cross-site Scripting – 2017-04-15 – 66 Viral Direct Message Clickjacking via link truncation leading to capture of both Google credentials & installation of malicious 3rd party Twitter App Analysed #643274 Valid Misconfiguration and Insecure Design High 2019-10-31 – 64 Blind XSS in Mobpub Marketplace Admin Production | Sentry via demand.mopub.com (User-Agent) Analysed #275518 Valid Cross-site Scripting High 2018-02-17 – 63 Bypassing x profile verification to receive instant blue checkmark and unlimited profile changes Analysed #2257374 Valid Input Validation and Logic Low 2024-03-26 $250 60 Bypass Password Authentication to Update the Password Analysed #970157 Valid Authentication High 2021-01-11 – 59 HTTP Response Splitting (CRLF injection) in report_story Analysed #52042 Valid No weakness recorded – 2015-04-21 – 59 Periscope iOS app CSRF in follow action due to deeplink Analysed #805073 Valid Cross-Site Request Forgery Low 2020-03-31 $2,940 58 NO username used in authenthication to www.mopub.com leading to direct password submission which has unlimited submission rate. Analysed #790854 Valid No weakness recorded Medium 2020-02-28 – 58 Ability to bruteforce mopub account’s password due to lack of rate limitation protection using {ip rotation techniques} Analysed #819930 Valid Authentication Low 2020-07-10 $420 55 Subdomain takeover on dev-admin.periscope.tv Analysed #531890 Valid Access Control Medium 2019-05-28 – 55 DOM based cookie bomb Analysed #57356 Valid Denial of Service – 2017-04-11 – 55 Open Redirect on https://www.twitterflightschool.com/widgets/experience?destination_url=https://evil.com Analysed #1073565 Valid Open Redirect Low 2021-05-04 – 53 csp bypass + xss Analysed #153666 Valid Cross-site Scripting – 2017-07-05 – 51 reverb.twitter.com redirects to vulnerable reverb.guru Analysed #158148 Valid No weakness recorded – 2016-10-01 – 50 DOMXSS in Tweetdeck Analysed #119471 Valid Cross-site Scripting – 2017-04-02 – 50 URGENT - Subdomain Takeover on media.vine.co due to unclaimed domain pointing to AWS Analysed #32825 Valid Cross-site Scripting – 2014-11-03 – 50 Periscope-all Firebase database takeover Analysed #684099 Valid Access Control Critical 2019-09-25 – 49 Tracking of users on third-party websites using the Twitter cookie, due to a flaw in authenticating image requests Analysed #329957 Valid Information Disclosure Medium 2019-02-08 $1,120 49 Stealing User emails by clickjacking cards.twitter.com/xxx/xxx Analysed #154963 Valid Misconfiguration and Insecure Design Medium 2017-02-03 – 49 Opportunity to obtain private tweets through search widget preview caches Analysed #263760 Valid Input Validation and Logic – 2017-11-11 $1,120 48 Bypassing callback_url validation on Digits Analysed #108113 Valid Open Redirect – 2016-08-12 – 48 View liked twits of private account via publish.twitter.com Analysed #174721 Valid Information Disclosure Medium 2016-11-14 – 47 [dev.twitter.com] XSS and Open Redirect Protection Bypass Analysed #330008 Valid No weakness recorded Medium 2019-02-07 $1,120 46 Cross-site scripting (reflected) Analysed #176754 Valid Cross-site Scripting Medium 2016-12-09 – 45 Bypass t.co link shortener in Twitter direct messages Analysed #1148548 Valid Input Validation and Logic Low 2021-05-18 – 44 Open Redirect Analysed #246897 Valid Open Redirect – 2017-08-19 – 41 CSRF on cards API Analysed #95555 Valid Cross-Site Request Forgery – 2017-04-11 – 41 Twitter iOS fails to validate server certificate and sends oauth token Analysed #168538 Valid Cryptography High 2016-12-23 $2,100 40 Bypass Password Authentication to Update the Password Analysed #982293 Valid Authentication Medium 2021-02-12 – 39 niche s3 buckets are readable/writeable/deleteable by authorized AWS users Analysed #129381 Valid Authentication – 2017-04-02 – 39 Urgent : Unauthorised Access to Media content of all Direct messages and protected tweets(Indirect object reference) Analysed #99600 Valid Authentication High 2018-03-21 – 39 XSS on https://app.mopub.com/reports/custom/add/ [new-d1] Analysed #692352 Valid No weakness recorded – 2019-12-07 – 38 [IDOR][translate.twitter.com] Opportunity to change any comment at the forum Analysed #181748 Valid Access Control Low 2017-05-12 – 38 Wrong Interpretation of URL encoded characters, showing different punny code leads to redirection on different domain Analysed #635597 Valid Open Redirect Low 2019-08-26 $560 37 Listing of Amazon S3 Bucket accessible to any amazon authenticated user (metrics.pscp.tv) Analysed #278191 Valid Information Disclosure – 2017-11-19 $140 36 2 Subdomains Takeover at readfu.com Analysed #1073114 Valid Access Control Medium 2021-03-15 – 35 CSRF on https://www.niche.co leads to "account disconnection" #493552 Duplicate Cross-Site Request Forgery Medium 2019-03-02 – 35 Accepting error message on twitter sends you to attacker site Analysed #781673 Valid Open Redirect Medium 2020-03-13 $560 33