Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'DigitalSellz' disclosed a bug submitted by b'faisalahmed' 
b'USER Account is not being deleted after user "Delete Account" from DASHBOARD'

17 Aug 2014

b'Mail.Ru' disclosed a bug submitted by b'vah13' 
b'SQL '

16 Aug 2014

b'Secret' disclosed a bug submitted by b'mohaab007' 
b'secret app for iOS and android is sending some info over HTTP'

16 Aug 2014

b'Twitter' disclosed a bug submitted by b'mohaab007' 
b'uclfinal.twitter.com and euro2012.twitter.com are vulnerable to CRIME attack'

16 Aug 2014
wont-fix

b'Automattic' disclosed a bug submitted by b'mohaab007' 
b'Top 10 2013-A2-Broken Authentication and Session Management - wordpress.com'

16 Aug 2014
wont-fix

b'Envoy' disclosed a bug submitted by b'anshuman_bh' 
b'Stored XSS on sign_up page'

16 Aug 2014

b'Envoy' disclosed a bug submitted by b'anshuman_bh' 
b'Stored XSS on adding locations'

16 Aug 2014

b'Automattic' disclosed a bug submitted by b'mohaab007' 
b'Missing HSTS header in https://app.simplenote.com'

16 Aug 2014
wont-fix

b'Twitter' disclosed a bug submitted by b'jpsecurityresearch' 
b'XSS ON MOPUB.COM'

15 Aug 2014

b'Detectify' disclosed a bug submitted by b'shahmeer_amir' 
b'No logout mechanism due cookie tampering'

15 Aug 2014
wont-fix

b'Slack' disclosed a bug submitted by b'ashesh' 
b'TLS1/SSLv3 Renegotiation Vulnerability'

14 Aug 2014
wont-fix

b'Envoy' disclosed a bug submitted by b'tdthechamp' 
b'Authentication Bypass'

14 Aug 2014
wont-fix

b'Factlink' disclosed a bug submitted by b'shahmeer_amir' 
b'Click-Jacking due to missing X-frame header'

13 Aug 2014
wont-fix

b'Phabricator' disclosed a bug submitted by b'tunnelshade' 
b'XSS in editor by any user'

13 Aug 2014

b'Slack' disclosed a bug submitted by b'cliffordtrigo' 
b'Content Spoofing'

11 Aug 2014
wont-fix

b'Automattic' disclosed a bug submitted by b'jeroldcamacho' 
b'xss in simperium.com'

10 Aug 2014

b'Automattic' disclosed a bug submitted by b'niks' 
b'privilege escalation'

10 Aug 2014

b'Localize' disclosed a bug submitted by b'jeroldcamacho' 
b'missing sender policy framework (SPF)'

09 Aug 2014

b'Envoy' disclosed a bug submitted by b'shahmeer_amir' 
b'Too much sensitive information in GET https://signwithenvoy.com/device_config/preview_badge'

09 Aug 2014
wont-fix

b'CloudFlare' disclosed a bug submitted by b'smiegles' 
b'jplayer.swf Cross-site scripting'

08 Aug 2014

1 ... 688 689 690 691 692 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM