Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Phabricator' disclosed a bug submitted by b'tunnelshade' 
b'Abusing daemon logs for Privilege escalation under certain scenarios'

18 Jun 2014

b'FanFootage' disclosed a bug submitted by b'shubham' 
b'Session Token is not Verified while changing Account Setting's which Result In account Takeover'

14 Jun 2014

b'IRCCloud' disclosed a bug submitted by b'gunda' 
b'Log Out Cross site Request Forgery'

13 Jun 2014

b'Coin.co' disclosed a bug submitted by b'anshuman_bh' 
b'Coin.co Admin interface accessible externally'

13 Jun 2014
wont-fix

b'Phabricator' disclosed a bug submitted by b'tunnelshade' 
b'Abusing VCS control on phabricator'

13 Jun 2014

b'HackerOne' disclosed a bug submitted by b'siddiki' 
b'Adding an user email address to the list before confirming.'

11 Jun 2014
wont-fix

b'Minr.es' disclosed a bug submitted by b'nahamsec' 
b'readable .htaccess '

11 Jun 2014

b'Mail.Ru' disclosed a bug submitted by b'siddiki' 
b'No CSRF token used in Phone Verification POST'

11 Jun 2014
wont-fix

b'Ian Dunn' disclosed a bug submitted by b'siddiki' 
b'PHP and Wordpress version disclosure'

11 Jun 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'siddiki' 
b'Old Sessions remain valid after the password change.'

11 Jun 2014
wont-fix

b'OkCupid' disclosed a bug submitted by b'quistertow' 
b'XSS - okcupid.com'

10 Jun 2014

b'Factlink' disclosed a bug submitted by b'robin' 
b'Url Redirection'

10 Jun 2014
wont-fix

b'HackerOne' disclosed a bug submitted by b'guido' 
b'Session not invalidated after password reset'

10 Jun 2014

b'concrete5' disclosed a bug submitted by b'smiegles' 
b'/index.php/dashboard/sitemap/explore/ Cross-site scripting'

09 Jun 2014

b'concrete5' disclosed a bug submitted by b'smiegles' 
b'dashboard/pages/types [Unknown column 'Array' in 'where clause'] disclosure.'

09 Jun 2014

b'concrete5' disclosed a bug submitted by b'smiegles' 
b'CONCRETE5 - path disclosure.'

09 Jun 2014

b'Secret' disclosed a bug submitted by b'siddiki' 
b'Login CSRF in Secret.ly'

09 Jun 2014

b'Yahoo!' disclosed a bug submitted by b'joserabal' 
b'Bypass of the Clickjacking protection on Flickr using data URL in iframes'

06 Jun 2014

b'Coinbase' disclosed a bug submitted by b'ryancollins' 
b'2 factor authentication design flaw'

06 Jun 2014

b'Mail.Ru' disclosed a bug submitted by b'mlik120' 
b'Clickjacking'

06 Jun 2014

1 ... 697 698 699 700 701 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM