Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP' disclosed a bug submitted by b'johnleitch' 
b'Locale::parseLocale Double Free'

27 Jun 2014

b'Phabricator' disclosed a bug submitted by b'sehacure' 
b'CSRF token valid even after the session logout of a particular user'

26 Jun 2014
wont-fix

b'IRCCloud' disclosed a bug submitted by b'chandrakant' 
b' User Account Creation CSRF '

25 Jun 2014

b'Coin.co' disclosed a bug submitted by b'guido' 
b'Facilitation of XSS attacks through supporting the HTTP TRACE method (cross-site tracing)'

25 Jun 2014

b'Coin.co' disclosed a bug submitted by b'stalker' 
b'Found clickjacking vulnerability'

24 Jun 2014

b'Python' disclosed a bug submitted by b'arizvisa' 
b"integer overflow in 'buffer' type allows reading memory"

24 Jun 2014

b'Python' disclosed a bug submitted by b'guido' 
b'Python vulnerability: reading arbitrary process memory'

20 Jun 2014

b'HackerOne' disclosed a bug submitted by b'idps' 
b'Potential denial of service in hackerone.com/teams/new'

20 Jun 2014

b'Sandbox Escape' disclosed a bug submitted by b'comex' 
b'Linux PI futex self-requeue bug'

19 Jun 2014

b'Flash' disclosed a bug submitted by b'kinine' 
b'Flash Sandbox Bypass'

19 Jun 2014

b'Coin.co' disclosed a bug submitted by b'internetwache' 
b'Wordpress readme.html / X-Powered-By-Header (low crit)'

19 Jun 2014
wont-fix

b'Phabricator' disclosed a bug submitted by b'tunnelshade' 
b'Abusing daemon logs for Privilege escalation under certain scenarios'

18 Jun 2014

b'FanFootage' disclosed a bug submitted by b'shubham' 
b'Session Token is not Verified while changing Account Setting's which Result In account Takeover'

14 Jun 2014

b'IRCCloud' disclosed a bug submitted by b'gunda' 
b'Log Out Cross site Request Forgery'

13 Jun 2014

b'Coin.co' disclosed a bug submitted by b'anshuman_bh' 
b'Coin.co Admin interface accessible externally'

13 Jun 2014
wont-fix

b'Phabricator' disclosed a bug submitted by b'tunnelshade' 
b'Abusing VCS control on phabricator'

13 Jun 2014

b'HackerOne' disclosed a bug submitted by b'siddiki' 
b'Adding an user email address to the list before confirming.'

11 Jun 2014
wont-fix

b'Minr.es' disclosed a bug submitted by b'nahamsec' 
b'readable .htaccess '

11 Jun 2014

b'Mail.Ru' disclosed a bug submitted by b'siddiki' 
b'No CSRF token used in Phone Verification POST'

11 Jun 2014
wont-fix

b'Ian Dunn' disclosed a bug submitted by b'siddiki' 
b'PHP and Wordpress version disclosure'

11 Jun 2014
wont-fix

1 ... 752 753 754 755 756 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM