The unofficial HackerOne disclosure Timeline

b'IRCCloud' disclosed a bug submitted by b'ashesh'
b'Unwanted Spamming Using CSRF [LOGGED IN USER]'

17 May 2014 timeline

wont-fix

b'Automattic' disclosed a bug submitted by b'melvin'
b'Simplenote Silverlight cross-domain policy misconfiguration'

17 May 2014 timeline

b'Localize' disclosed a bug submitted by b'daksh'
b'ClickJacking'

17 May 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'redshark1802'
b'Local File Include on marketing-dam.yahoo.com'

16 May 2014 timeline

b'C2FO' disclosed a bug submitted by b'melvin'
b'The server supports only older protocols for HTTPS connections'

15 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo'
b'Unsecure cookies, cookie flag secure not set'

15 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'melvin'
b'Session cookie can be leaked over an unencrypted HTTP connection'

15 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'shipcode'
b'Missing X-Content-Type-Options'

15 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'nikbugbounty'
b'Bug in iOS application which could lead to unauthorised access.'

15 May 2014 timeline

b'RelateIQ' disclosed a bug submitted by b'shahmeer_amir'
b'Value of JSESSIONID and XSRF token parameter in cookie remains same before and after login'

14 May 2014 timeline

b'concrete5' disclosed a bug submitted by b'reactors08'
b'XSS in private message'

14 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo'
b'Sign up CSRF'

14 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'robin'
b'HTML Form without CSRF protection'

14 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'internetwache'
b'CSRF - Creating accounts'

14 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'reporter'
b'Dangerous Persistent xss'

13 May 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'ashesh'
b'"SESSION" Cookie without HttpOnly flag set'

11 May 2014 timeline

wont-fix

b'Localize' disclosed a bug submitted by b'reactors08'
b'XSS in password'

11 May 2014 timeline

b'ReddAPI' disclosed a bug submitted by b'simon90'
b'Login page password-guessing attack'

09 May 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'internetwache'
b'Possible clickjacking at shop.khanacademy.org'

08 May 2014 timeline

wont-fix

b'Khan Academy' disclosed a bug submitted by b'internetwache'
b'CSRF - Adding/Removing items to cart - shop.khanacademy.org'

08 May 2014 timeline

wont-fix

1 ... 762 763 764 765 766 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.