Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'CloudFlare' disclosed a bug submitted by b'jpsecurityresearch' 
b'Apache mod_negotiation filename bruteforcing'

19 Sep 2014
wont-fix

b'WePay' disclosed a bug submitted by b'pranav_hivarekar' 
b'CSRF (Make email primary) may lead to account compromise'

19 Sep 2014

b'The Internet' disclosed a bug submitted by b'kaeso' 
b'Multiple issues in looking-glass software (aka from web to BGP injections)'

17 Sep 2014

b'Phabricator' disclosed a bug submitted by b'sehacure' 
b'Open redirection on secure.phabricator.com'

17 Sep 2014

b'Mail.Ru' disclosed a bug submitted by b'bigbear' 
b'Reflected XSS in User-Agent'

16 Sep 2014

b'Khan Academy' disclosed a bug submitted by b'bigbear' 
b'Suffix of url-path is vulnerable to XSS-attack'

16 Sep 2014

b'Detectify' disclosed a bug submitted by b'shahmeer_amir' 
b'Cookie manipulation does not log attacker out of the session'

16 Sep 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'bigbear' 
b'SQL Injection on 11x11.mail.ru'

16 Sep 2014

b'RelateIQ' disclosed a bug submitted by b'shahmeer_amir' 
b'Resubmitted with POC #18685 Password reset CSRF'

16 Sep 2014

b'Automattic' disclosed a bug submitted by b'pranav_hivarekar' 
b'User Enumeration and Guessable User Account Attack on WORDPRESS'

13 Sep 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'vah13' 
b'SQL inj'

12 Sep 2014

b'HackerOne' disclosed a bug submitted by b'thetime' 
b'Redirect while opening links in new tabs'

12 Sep 2014

b'Phabricator' disclosed a bug submitted by b'djadmin' 
b'Content spoofing'

11 Sep 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'chandrakant' 
b'Reflected XSS'

10 Sep 2014

b'CloudFlare' disclosed a bug submitted by b'chandrakant' 
b'System Status Update CSRF'

10 Sep 2014

b'Phabricator' disclosed a bug submitted by b'xtross' 
b'Forgot Password Issue'

10 Sep 2014

b'Mail.Ru' disclosed a bug submitted by b'stalker' 
b'Version Disclosure (NginX)'

10 Sep 2014
wont-fix

b'IRCCloud' disclosed a bug submitted by b'harshafriend4all' 
b'CSRF to Account Take Over Bug '

08 Sep 2014

b'Twitter' disclosed a bug submitted by b'harshafriend4all' 
b'CSRF in crashlytics.com'

08 Sep 2014

b'CloudFlare' disclosed a bug submitted by b'robincool031' 
b'csrf on password change functionality '

07 Sep 2014

1 ... 694 695 696 697 698 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM