Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'IRCCloud' disclosed a bug submitted by b'anshuman_bh' 
b'Host Header is not validated resulting in Open Redirect'

24 Apr 2014

b'Ian Dunn' disclosed a bug submitted by b'atulshedage' 
b'Xss in CampTix Event Ticketing'

24 Apr 2014

b'ReddAPI' disclosed a bug submitted by b'exploitprotocol' 
b'No Captcha or rate limit on Login Page'

23 Apr 2014

b'IRCCloud' disclosed a bug submitted by b'exploitprotocol' 
b"Session Token is not Verified while changing Account Setting's which Result In account Takeover"

23 Apr 2014

b'respondly' disclosed a bug submitted by b'atom' 
b'Deleting team members'

23 Apr 2014

b'Localize' disclosed a bug submitted by b'simon90' 
b'Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)'

23 Apr 2014

b'Localize' disclosed a bug submitted by b'faisalahmed' 
b'Atttacker can send "Invitation Request" to a Project that is not even created yet!'

23 Apr 2014

b'respondly' disclosed a bug submitted by b'mohamed_fouad' 
b'Full Path Disclosure'

23 Apr 2014

b'Localize' disclosed a bug submitted by b'faisalahmed' 
b'Full Path Disclosure (FPD) in www.localize.im'

23 Apr 2014

b'Ian Dunn' disclosed a bug submitted by b'cliffordtrigo' 
b'Stored XSS in all fields in Basic Google Maps Placemarks Settings'

23 Apr 2014

b'Secret' disclosed a bug submitted by b'simon90' 
b'Strict Transport Security on secret.ly'

22 Apr 2014

b'OkCupid' disclosed a bug submitted by b'simon90' 
b'Stored XSS on your site..'

22 Apr 2014

b'HackerOne' disclosed a bug submitted by b'simon90' 
b'Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)'

22 Apr 2014

b'Localize' disclosed a bug submitted by b'robin' 
b'No BruteForce Protection'

22 Apr 2014

b'respondly' disclosed a bug submitted by b'melvin' 
b'OAuth open redirect'

22 Apr 2014

b'Localize' disclosed a bug submitted by b'faisalahmed' 
b'A Serious Bug on SIGNUP Process!'

22 Apr 2014

b'Localize' disclosed a bug submitted by b'faisalahmed' 
b'infinite number of new project creation!'

22 Apr 2014

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo' 
b'Login CSRF'

21 Apr 2014

b'respondly' disclosed a bug submitted by b'smiegles' 
b'Persistent Cross-site scripting vulnerability settings.'

21 Apr 2014

b'respondly' disclosed a bug submitted by b'sasi2103' 
b'Import emails from Gmail are activate XSS'

21 Apr 2014

1 ... 703 704 705 706 707 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM