Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Automattic' disclosed a bug submitted by b'simon90' 
b'XSS on gravatar'

07 Sep 2014

b'Phabricator' disclosed a bug submitted by b'andy_r' 
b'Password Reset Links Not Expiring'

06 Sep 2014
wont-fix

b'WePay' disclosed a bug submitted by b'pinoy' 
b'Sensitive settings need Re authentication'

05 Sep 2014
wont-fix

b'Slack' disclosed a bug submitted by b'simon90' 
b'Password Policy issue (Weak Protect)'

04 Sep 2014

b'Slack' disclosed a bug submitted by b'asdjsonyou' 
b'Content Spoofing all Integrations in https://team.slack.com/services/new/'

03 Sep 2014

b'HackerOne' disclosed a bug submitted by b'siddiki' 
b'Notification of previous signed out user leakage.'

01 Sep 2014
wont-fix

b'Twitter' disclosed a bug submitted by b'mohdhaji87' 
b'Password reset link not validated.'

31 Aug 2014
wont-fix

b'Slack' disclosed a bug submitted by b'sehacure' 
b'Broken Authentication (including Slack OAuth bugs)'

30 Aug 2014

b'Slack' disclosed a bug submitted by b'sehacure' 
b'URL redirection flaw'

30 Aug 2014

b'Slack' disclosed a bug submitted by b'sehacure' 
b'Stored XSS on this link https://sehacure.slack.com/help/requests/'

30 Aug 2014

b'Uzbey LLC' disclosed a bug submitted by b'atom' 
b'Missing HSTS (Strict Transport Security)'

29 Aug 2014

b'Uzbey LLC' disclosed a bug submitted by b'dmc' 
b'Price Manipulation'

29 Aug 2014

b'concrete5' disclosed a bug submitted by b'mkly' 
b'XSS in Theme Preview Tools File'

28 Aug 2014

b'concrete5' disclosed a bug submitted by b'squirmy' 
b'XSS on [/concrete/concrete/elements/dashboard/sitemap.php]'

28 Aug 2014

b'jsDelivr' disclosed a bug submitted by b'vineet' 
b'Using nmap revealing sensitive information '

28 Aug 2014

b'HackerOne' disclosed a bug submitted by b'djamel' 
b'Email changing'

28 Aug 2014
wont-fix

b'Automattic' disclosed a bug submitted by b'mohaab007' 
b'Missing HSTS header in https://public-api.wordpress.com'

28 Aug 2014
wont-fix

b'DC Compendium' disclosed a bug submitted by b'adrianbelen' 
b'source code disclosure'

27 Aug 2014

b'Envoy' disclosed a bug submitted by b'sasi2103' 
b'Delete visitor from IPAD with fullname which contains JS results XSS'

27 Aug 2014

b'Coinbase' disclosed a bug submitted by b'0ctac0der' 
b'Simultaneous Session Logon : Improper Session Management'

26 Aug 2014
wont-fix

1 ... 741 742 743 744 745 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM