Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uzbey LLC' disclosed a bug submitted by b'dmc' 
b'Price Manipulation'

29 Aug 2014

b'concrete5' disclosed a bug submitted by b'mkly' 
b'XSS in Theme Preview Tools File'

28 Aug 2014

b'concrete5' disclosed a bug submitted by b'squirmy' 
b'XSS on [/concrete/concrete/elements/dashboard/sitemap.php]'

28 Aug 2014

b'jsDelivr' disclosed a bug submitted by b'vineet' 
b'Using nmap revealing sensitive information '

28 Aug 2014

b'HackerOne' disclosed a bug submitted by b'djamel' 
b'Email changing'

28 Aug 2014
wont-fix

b'Automattic' disclosed a bug submitted by b'mohaab007' 
b'Missing HSTS header in https://public-api.wordpress.com'

28 Aug 2014
wont-fix

b'DC Compendium' disclosed a bug submitted by b'adrianbelen' 
b'source code disclosure'

27 Aug 2014

b'Envoy' disclosed a bug submitted by b'sasi2103' 
b'Delete visitor from IPAD with fullname which contains JS results XSS'

27 Aug 2014

b'Coinbase' disclosed a bug submitted by b'0ctac0der' 
b'Simultaneous Session Logon : Improper Session Management'

26 Aug 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'pum' 
b'Failed Certificate Validation On Custom Server (Register)'

25 Aug 2014

b'Coinbase' disclosed a bug submitted by b'bbohn' 
b'2FA settings allowed to be changed with no delay/freeze on funds'

25 Aug 2014
wont-fix

b'Slack' disclosed a bug submitted by b'asdjsonyou' 
b'Open Redirect login account'

25 Aug 2014

b'Slack' disclosed a bug submitted by b'asdjsonyou' 
b'Content spoofing at Stripe Integrations'

25 Aug 2014

b'WePay' disclosed a bug submitted by b'pranav_hivarekar' 
b'Typical form vulnerable to csrf attack'

23 Aug 2014

b'HackerOne' disclosed a bug submitted by b'xtross' 
b'Account Hijacking (Only rare case scenario)'

23 Aug 2014
wont-fix

b'OkCupid' disclosed a bug submitted by b'kenb' 
b'XSS in 404 page of cdn.okccdn.com'

22 Aug 2014

b'Uzbey LLC' disclosed a bug submitted by b'darkh4x' 
b'Missing "size check" on files to upload could make memory leaks.'

22 Aug 2014

b'Slack' disclosed a bug submitted by b'cliffordtrigo' 
b'Deleting Teams implemenation'

21 Aug 2014
wont-fix

b'WePay' disclosed a bug submitted by b'mrrm' 
b'oauth redirect uri validation bug leads to open redirect and account compromise'

21 Aug 2014
wont-fix

b'Mavenlink' disclosed a bug submitted by b'cliffordtrigo' 
b'Clickjacking'

21 Aug 2014

1 ... 686 687 688 689 690 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM