Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Factlink' disclosed a bug submitted by b'chandrakant' 
b'Sign up CSRF'

05 Jun 2014

b'Factlink' disclosed a bug submitted by b'shahriar' 
b'Password reset link doesn't expire.'

05 Jun 2014

b'MS-DOS' disclosed a bug submitted by b'dhaval' 
b'Injecting Distrust and Disbelief in Addicted Gamers '

04 Jun 2014

b'99designs' disclosed a bug submitted by b'smilez_hapiez' 
b'Insecure transition from HTTP to HTTPS in form post'

04 Jun 2014
wont-fix

b'Factlink' disclosed a bug submitted by b'bitquark' 
b'Proxy service crash DoS'

04 Jun 2014

b'Factlink' disclosed a bug submitted by b'jaikeysarraf' 
b'Anonymous Proxy and IP leak '

04 Jun 2014

b'Automattic' disclosed a bug submitted by b'khairalhamad' 
b'Serving Transitions From: HTTP Protocol (not secure)'

04 Jun 2014
wont-fix

b'RelateIQ' disclosed a bug submitted by b'shahmeer_amir' 
b'Wildcard DNS in website'

01 Jun 2014

b'Slack' disclosed a bug submitted by b'karshxz7593' 
b'Stored XSS Found'

01 Jun 2014

b'Slack' disclosed a bug submitted by b'kadaba' 
b'open redirect in https://slack.com'

31 May 2014
wont-fix

b'InVision' disclosed a bug submitted by b'xss' 
b'TLS Renegotiation and Denial of Service Attacks on InVision.'

30 May 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'vinod' 
b'Admin panel of http://tp-test1.corp.mail.ru/ is acccessible publicly'

30 May 2014

b'Mail.Ru' disclosed a bug submitted by b'vahagn' 
b'SQL inj'

30 May 2014

b'Detectify' disclosed a bug submitted by b'shahmeer_amir' 
b'CSRF exists in your detectify password change'

30 May 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'vahagn' 
b'SQL injection update.mail.ru'

30 May 2014

b'Factlink' disclosed a bug submitted by b'pranav_hivarekar' 
b'X/Csrf token problem'

30 May 2014

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Slack OAuth2 "redirect_uri" Bypass '

29 May 2014

b'Coinbase' disclosed a bug submitted by b'anshuman_bh' 
b'Multiple Issues related to registering applications'

29 May 2014

b'Detectify' disclosed a bug submitted by b'siddiki' 
b'Old Sessions remain valid after the password change.'

29 May 2014
wont-fix

b'Detectify' disclosed a bug submitted by b'siddiki' 
b'Password Reset token remain valid even after the issuance of a new token.'

29 May 2014
wont-fix

1 ... 710 711 712 713 714 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM