Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Automattic disclosed a bug submitted by melvin 
Simplenote Silverlight cross-domain policy misconfiguration

17 May 2014

Localize disclosed a bug submitted by daksh 
ClickJacking

17 May 2014

Yahoo! disclosed a bug submitted by redshark1802 
Local File Include on marketing-dam.yahoo.com

16 May 2014

C2FO disclosed a bug submitted by melvin 
The server supports only older protocols for HTTPS connections

15 May 2014

IRCCloud disclosed a bug submitted by cliffordtrigo 
Unsecure cookies, cookie flag secure not set

15 May 2014

IRCCloud disclosed a bug submitted by melvin 
Session cookie can be leaked over an unencrypted HTTP connection

15 May 2014

IRCCloud disclosed a bug submitted by shipcode 
Missing X-Content-Type-Options

15 May 2014

IRCCloud disclosed a bug submitted by nikbugbounty 
Bug in iOS application which could lead to unauthorised access.

15 May 2014

RelateIQ disclosed a bug submitted by shahmeer_amir 
Value of JSESSIONID and XSRF token parameter in cookie remains same before and after login

14 May 2014

concrete5 disclosed a bug submitted by reactors08 
XSS in private message

14 May 2014

IRCCloud disclosed a bug submitted by cliffordtrigo 
Sign up CSRF

14 May 2014

IRCCloud disclosed a bug submitted by robin 
HTML Form without CSRF protection

14 May 2014

IRCCloud disclosed a bug submitted by internetwache 
CSRF - Creating accounts

14 May 2014

IRCCloud disclosed a bug submitted by reporter 
Dangerous Persistent xss

13 May 2014

IRCCloud disclosed a bug submitted by ashesh 
"SESSION" Cookie without HttpOnly flag set

11 May 2014
wont-fix

Localize disclosed a bug submitted by reactors08 
XSS in password

11 May 2014

ReddAPI disclosed a bug submitted by simon90 
Login page password-guessing attack

09 May 2014

Khan Academy disclosed a bug submitted by internetwache 
Possible clickjacking at shop.khanacademy.org

08 May 2014
wont-fix

Khan Academy disclosed a bug submitted by internetwache 
CSRF - Adding/Removing items to cart - shop.khanacademy.org

08 May 2014
wont-fix

C2FO disclosed a bug submitted by exploitprotocol 
c2fo.com is releasing sensitive Information about Database Configuration.

08 May 2014

1 ... 623 624 625 626 627 ... 637

BY DENIS WERNER - @NOBBD - IMPRESSUM