Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Phabricator' disclosed a bug submitted by b'dawidczagan' 
b'Improperly implemented password recovery link functionality'

27 Feb 2014

b'Flash' disclosed a bug submitted by b'clem1' 
b'Flash double free vulnerability leads to code execution'

27 Feb 2014

b'Sandbox Escape' disclosed a bug submitted by b'someonenobbd' 
b'OSX ATS arbitrary free issue may lead to App Sandbox bypass'

26 Feb 2014

b'Sandbox Escape' disclosed a bug submitted by b'someonenobbd' 
b'OSX ATS memory corruption may lead to App Sandbox bypass'

26 Feb 2014

b'Phabricator' disclosed a bug submitted by b'dawidczagan' 
b'Log in a user to another account'

22 Feb 2014

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b"Switching the user to the attacker's account"

20 Feb 2014

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b'Improper session management'

19 Feb 2014

b'HackerOne' disclosed a bug submitted by b'dawidczagan' 
b"Information disclosure (reset password token) and changing the user's password"

19 Feb 2014

b'HackerOne' disclosed a bug submitted by b'laceratus' 
b'Upload profile photo from URL'

15 Feb 2014

b'HackerOne' disclosed a bug submitted by b'szgru' 
b'DNS Misconfiguration'

15 Feb 2014

b'Sandbox Escape' disclosed a bug submitted by b'tyranid' 
b'.NET Type Traversal Vulnerability'

11 Feb 2014

b'PHP' disclosed a bug submitted by b'kubabrecka' 
b'PHP Heap Overflow Vulnerability in imagecrop()'

06 Feb 2014

b'Sandbox Escape' disclosed a bug submitted by b'pageexec' 
b'Linux 3.4+: arbitrary write with CONFIG_X86_X32'

31 Jan 2014

b'HackerOne' disclosed a bug submitted by b'gazly' 
b'Login page password-guessing attack'

16 Jan 2014
wont-fix

b'Flash' disclosed a bug submitted by b'masatokinugawa' 
b'Handling of jar: URIs bypasses AllowScriptAccess=never'

14 Jan 2014

b'Sandbox Escape' disclosed a bug submitted by b'datuzi' 
b'Win32k Window Handle Vulnerability (EoP)'

14 Jan 2014

b'HackerOne' disclosed a bug submitted by b'andrisatteka' 
b'CSRF login'

13 Jan 2014

b'HackerOne' disclosed a bug submitted by b'gazly' 
b'Autocomplete Enabled in Password form '

09 Jan 2014
wont-fix

b'HackerOne' disclosed a bug submitted by b'szgru' 
b'Missing SPF for hackerone.com'

09 Jan 2014

b'HackerOne' disclosed a bug submitted by b'sehacure' 
b'Broken Authentication and session management OWASP A2'

09 Jan 2014

1 ... 708 709 710 711

BY DENIS WERNER - @NOBBD - IMPRESSUM