Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'redshark1802' 
b'Login without SSL-Protection'

27 May 2014
wont-fix

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo' 
b'Bruteforcing irccloud login'

26 May 2014

b'OkCupid' disclosed a bug submitted by b'karshxz7593' 
b'XSS Vulnerability Found!'

26 May 2014

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Stored XSS in www.slack-files.com'

23 May 2014

b'Meteor' disclosed a bug submitted by b'chandrakant' 
b'Open Url Reditection After authentication '

23 May 2014

b'IRCCloud' disclosed a bug submitted by b'nikbugbounty' 
b'iOS application does not destroy session upon logout.'

22 May 2014

b'CloudFlare' disclosed a bug submitted by b'dekeeu' 
b'XSS - http://js.cloudflare.com'

22 May 2014
wont-fix

b'respondly' disclosed a bug submitted by b'dhaval' 
b'No Bruteforce Protection'

22 May 2014

b'CloudFlare' disclosed a bug submitted by b'smilez_hapiez' 
b' Cookie missing the Secure flag '

22 May 2014
wont-fix

b'Mail.Ru' disclosed a bug submitted by b'atom' 
b'Unproper usage of Mobile Number that will lead to Information Disclosure'

22 May 2014
wont-fix

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Stored XSS in Channel Chat '

21 May 2014

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Open Redirect in Slack'

21 May 2014
wont-fix

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Duplicate of #4550'

21 May 2014

b'Automattic' disclosed a bug submitted by b'smilez_hapiez' 
b'Session Cookie without Secure flag set'

21 May 2014
wont-fix

b'Automattic' disclosed a bug submitted by b'smilez_hapiez' 
b'Session Cookie without Secure flag set'

21 May 2014
wont-fix

b'respondly' disclosed a bug submitted by b'karthic' 
b'X-Content-Type-Options header missing'

21 May 2014

b'Localize' disclosed a bug submitted by b'ajaysinghnegi' 
b'Projects Watch or Notifications Settings Change Via CSRF'

21 May 2014

b'CloudFlare' disclosed a bug submitted by b'shahmeer_amir' 
b'Apache Multiviews are enabled'

21 May 2014
wont-fix

b'Faceless' disclosed a bug submitted by b'trotmaster' 
b'Account hijacking possible through ADB backup feature'

21 May 2014

b'IRCCloud' disclosed a bug submitted by b'nikbugbounty' 
b'Login CSRF can be bypassed (Similar approach to previous one).'

20 May 2014

1 ... 711 712 713 714 715 ... 726

BY DENIS WERNER - @NOBBD - IMPRESSUM