using CUDA on GPU 0... Make sure that your saved checkpoint was also trained with GPU. If it was trained with CPU use -gpuid -1 for sampling as well creating an lstm... missing seed text, using uniform probability over first character -------------------------- am_en_hackerone.com - new control abouth of the server from an BOST request. In the context of the same origin is not nothuped. The request and results in a specific installed Service ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- III. Impact Use-After-Free -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- V. Redirect It size xss video for example sessions all the source code in a contains it here: https://www.eobot.com/sigele/products/9217 Title: Host Localize Header Disclosure and obters are ordered to correct protection not discloses Date: 2015-03-02T18:01:20.085Z Reporter: chmosama Team: Factlink Link: https://hackerone.com/reports/17514 Description: Title: SPF record you should set using the following frameset Any html end, once a bruteforce staff): For existing from server is that fails to controls the contents of the SPF records for the proof of concept: Add exist and enables, it possible since HTTP request, maximon account takes more format located at this using forward to some its response, that all of your email address is executed. Let's receives in the affected Developers in Web Server (Cross Exect process memory (or any other members from URL. This might have to be an authorization which lead to reset/Nown We can port this counter is an attempt to reproduce on the address of this issues. Jicho Title: Stored xss information disclosure in bypass Date: 2014-07-27T22:20:40.384Z Reporter: xtross1 Team: itBit Error Learch Date: 2014-04-17T07:44:06.584Z Reporter: filedescriptor Team: HackerOne Link: https://hackerone.com/reports/47973 Description: Hi, So, Working for deleteing a CSRF token with no password does not have added a new URL: https://app.mavenlink.com/logout?listorage?code=0460050 In additional URL is possible for a message placehold prefered by this form that the name is properly containing the main, needs to be compromised to having access to `settings`. Title: Stored xss. Title: User B's tickets Date: 2014-05-04T11:00:03.000Z Reporter: fairalahmed Team: Python Link: https://hackerone.com/reports/7399 Description: Title: Content spoofing functionality Ruporting attack. Date: 2014-03-08T10:02:21.783Z Reporter: 4lemon Team: Mobile Vikings Link: https://hackerone.com/reports/21067 Description: Hi, Title: CSRF token not enabled on Displaying times, which can be done in two properly. Hope you will see in the larget URL in Step Py Title by instant bypass and of url, then any cookie. Thank you should shown updating soor shortfuce that lets expired on browser is leaking escaped_response. Date: 2013-11-23T11:24:31.220Z Reporter: pranav_hivarekar Team: HackerOne Link: https://hackerone.com/reports/7967 Description: Title: Broken Security Date: 2015-07-08T00:00:00.000Z Reporter: guido Team: Python Link: https://hackerone.com/reports/27019 Description: Title: Reflected XSS in account and password reset tokens are in a new error message to coolding any concrete by user detected by password. This makes successfully password reset link was successfully crafting the URL http://trim.hw/ccting.co/settings/apps?sohe\tests` ``` Impact This is exported XSS. This is alreadated when they could be redirected to a page related to this bug, so: none' most without the address of it )'s account will testing buy it's a non-existration that the user uses content as a link to your password, can be downloaded fired. The main issue out a steal of the cookie areports. Intercept the victim. Confirmy Heading you can use password reset link. Proof of concept: Steps to verify: http://www.opens.org/pdasedim/selecting/account/easidpraider=1&url=writer.setRiff=1&allvailand_accounts_name=0,imgaddVendescall) machinus=adailbex]|attacker_amizn_manual_complete_line\\r\n', array(xsr + for, guess); frameword to prefile that the %0 -bug reports: - **DoabKWEUp(0cy id=) => report) : It's no rate limiting or account User Anotifications are not properly ry good on it instand 5000:qw referer: http://www.okcupid.com/settings/profile-user account looks like https://www.airbnb.com/s/UQN To verify that Aliceonts are allowed the Web filter and see the one can event the POST bug in the create an alongtine to a malformed mp4 file (from the browser is set to a sql or line trust in the confirmation parameter. Proof of Concept, Steps, GET hearts may allow the poc in a code since the man.pray was handlers. ###Sign Harmage leave :: - 31af4043aa186e-72e0-402f-4e51d-34147330037 -reporting_ottrive_programpase+4F%26access_type" class="form-signin-parameters: mobilevikings.be"; Date: Tool-quote-nuc-Password 2 resulting in the request. [[] a reference redirect_uriol//home/name/ori/13060096 For-content-Web Session------------------------------------------------------------------------- ``` ``` - argit title: User 5 POST #------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- This mine error messages ------------------------------------------------------------------------------------------------------------------------------------------ II. Logout from Bacrosts Title: Fill DNTPS in the Password FromSigs in BugBess Date: 2015-04-04T11:58:02.452Z Reporter: sappi Team: Twitter Link: https://hackerone.com/reports/33964 Description: Title: Reflective HTTLOF Slack on all code and demonstrance that a user again to create a protection of user BBL to the Phabricator attack - data, since it is set to any response. Recommendation __Proof of Concept Notice: ubdimicaloy after the calc applications and send the images and returns other code also able to account to authorize scenario into the web page with access to their rest. Here is that we can public the XSS bug bounty with the report. Thank you. POC: CSRF on Objects Date: 2014-04-24T09:47:45.080Z Reporter: nmaramagi Team: Shopify Link: https://hackerone.com/reports/49430 Description: Hi This bug for he can use a email of attack on this actual status is executed from invoice, is in the password from normal process. That might be a malformed by the request as the form multiple referers. I've already relemated website. (blog and notifications here no substring of **substart*. The account** then sometime of CSRF token is putlic Usur causes. As the response: ``` ID is available in a classed parameters of the application and implement the online logoo.com device. You will get the proper site This is used in attack by Output the cookie appear to connect to any futex. Cheers, Mathias Title: User B had the confirmation disclosure with shared content to be sent nothing for the delivery get to external here is the credited for this could internal sites which is sending the Web Consurt transited servers. To change the password, and its could used the next sanitize memory crash'. To get a vulnerable with file and it will post that an array deletes that an account back reset upaded since it as there analy availability. This is deleted by the user change your password by sy mart. I have already logged into over respocts to the website. It was reported directly to Visitor will getting has been to tryats/hackerone. Attached Kecause simply as an arguments allowing a HTML/hangs potential. * I'm allows remote authorization: 1. The data is still believe into a phone number id and secret expired. How to fix this one support.talker has not happening, external itself I found in it sites. A created buffer as the form with now updatach the password. This reducd the arbitrary user does not metadable, the HackerOne is an attempt to contact name to be uniquesed from the same time. To reproduce: - Fillating a fagis in order to account it should be clearly upto 'Transaction to any value. ### Gigned Apache Hicketore ===============3 An attacker can sharing buttons like : ">) We content that successfully free, you should not be any user reply the fact that an email will proper installedes after freed installation. Customer clicks on the enter all the invitation can says of the team Security Teams. Ensure that if a class chalge vulnerability Best regards, Mohaghes NT Pric Managemone Title: Facebook in case cgnicol-sharget/) Date: 2014-07-04T16:37:38.412Z Reporter: csafershoro Team: Drupalilaa Link: https://hackerone.com/reports/16507 Description: Hello, Markop received service should be locked from a user calls, there are a lifited like TLS-11 redirects to an unlock.php (Issert you will built invite to Email.allowumerome in account on pransact). This results in the contents of the corresponding session cookies. Thank you. Title: Server Grapser Poirture Malicious HTTP response link form Date: 2014-04-17T11:25:38.234Z Reporter: aj-_- Team: Factlink Link: https://hackerone.com/reports/4726 Description: Title: Host You Dublimitation Password reset token Date: 2014-07-05T15:43:37.498Z Reporter: marhus Team: Coinbase Link: https://hackerone.com/reports/63179 Description: Title: HTML Exploit Enableby program and into the arbitrary Web domain Full Via Information Domain Date: 2015-09-27T00:00:00.000Z Reporter: redguidr Team: Localize Link: https://hackerone.com/reports/1408 Description: I hope you are then that we have moved and after got a proof of concept: don't own anonytimezone on your applications. **Proof-of-concenntration** There is no proof of concept: 1) While protect