Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Yahoo! disclosed a bug submitted by jeroldcamacho 
XSS Vulnerability (my.yahoo.com)

07 May 2014

Coinbase disclosed a bug submitted by bryanstern 
Coinbase Android Security Vulnerabilities

07 May 2014

CloudFlare disclosed a bug submitted by peterjaric 
Security issue with your "bag" script

07 May 2014

InVision disclosed a bug submitted by xss 
Found a Clickjacking in blog.invisionapp.com.

04 May 2014

Slack disclosed a bug submitted by prakharprasad 
Stored XSS in Slackbot Direct Messages

04 May 2014

Coinbase disclosed a bug submitted by mazen160 
Information Disclosure That shows the webroot of CoinBase Server

04 May 2014
wont-fix

OkCupid disclosed a bug submitted by smiegles 
Login destination open redirection

01 May 2014

concrete5 disclosed a bug submitted by introvertmac 
Bypass auth.email-domains

30 Apr 2014

Coinbase disclosed a bug submitted by smilez_hapiez 
Cookie missing the HttpOnly flag

30 Apr 2014
wont-fix

Coinbase disclosed a bug submitted by smilez_hapiez 
IFRAME loaded from External Domains

30 Apr 2014
wont-fix

OkCupid disclosed a bug submitted by virii 
Reflected XSS on www.okcupid.com/signup

30 Apr 2014

respondly disclosed a bug submitted by atom 
OAuth Bug

30 Apr 2014

HackerOne disclosed a bug submitted by dawidczagan 
Flooding mailbox of user

30 Apr 2014
wont-fix

Detectify disclosed a bug submitted by shahmeer_amir 
No CSRF token on domain removal or addition

30 Apr 2014
wont-fix

OkCupid disclosed a bug submitted by hamihax 
XSS in okcupid.com by hamid

29 Apr 2014

Yahoo! disclosed a bug submitted by redshark1802 
Open redirect on tw.money.yahoo.com

29 Apr 2014

Coinbase disclosed a bug submitted by anshuman_bh 
Improper Validation of the Referrer header leading to Open URL Redirection

29 Apr 2014
wont-fix

Detectify disclosed a bug submitted by simon90 
SVN file disclosure on lazer.detectify.com

29 Apr 2014

OkCupid disclosed a bug submitted by rajuraju14 
okcupid.com vulnerable to Heartbleed attack

28 Apr 2014

IRCCloud disclosed a bug submitted by xss 
Login page password-guessing attack(Brute-force attack-High).

26 Apr 2014
wont-fix

1 ... 624 625 626 627 628 ... 637

BY DENIS WERNER - @NOBBD - IMPRESSUM