The unofficial HackerOne disclosure Timeline

b'Localize' disclosed a bug submitted by b'ashesh'
b'User credentials are sent in clear text'

18 Apr 2014 timeline

wont-fix

b'Localize' disclosed a bug submitted by b'shahmeer_amir'
b'Sensitive file'

18 Apr 2014 timeline

b'Localize' disclosed a bug submitted by b'nahamsec'
b'Apache Documentation'

18 Apr 2014 timeline

b'Flash' disclosed a bug submitted by b'kinine'
b'Flash local-with-fileaccess Sandbox Bypass'

17 Apr 2014 timeline

b'Lookout' disclosed a bug submitted by b'chmosama'
b'DOM-XSS Vulnerability'

17 Apr 2014 timeline

b'HackerOne' disclosed a bug submitted by b'leander'
b'creating titleless and non-closable bugs '

17 Apr 2014 timeline

b'concrete5' disclosed a bug submitted by b'occupe'
b'FULL PATH DISCLOSUR '

17 Apr 2014 timeline

b'Phabricator' disclosed a bug submitted by b'tomvg'
b'Persistent XSS: Editor link'

16 Apr 2014 timeline

b'concrete5' disclosed a bug submitted by b'tomdev'
b'HttpOnly flag not set for cookie on concrete5.org'

16 Apr 2014 timeline

b'concrete5' disclosed a bug submitted by b'atom'
b'XSS IN member List (Because of City Textbox)'

16 Apr 2014 timeline

b'Lookout' disclosed a bug submitted by b'internetwache'
b'Clickjacking at https://jira.corp.lookout.com'

15 Apr 2014 timeline

b'C2FO' disclosed a bug submitted by b'internetwache'
b'Password reset token leakage through referrer at https://app.c2fo.com/password/reset/'

15 Apr 2014 timeline

wont-fix

b'Khan Academy' disclosed a bug submitted by b'internetwache'
b'User guessing/enumeration at sw.khanacademy.org'

15 Apr 2014 timeline

wont-fix

b'Faceless' disclosed a bug submitted by b'shahmeer_amir'
b'Bruteforce attack in login panel'

15 Apr 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'melvin'
b'Full account takeover using CSRF and password reset'

14 Apr 2014 timeline

b'Phabricator' disclosed a bug submitted by b'goldshlager'
b'OAuth Stealing Attack (New)'

13 Apr 2014 timeline

b'Slack' disclosed a bug submitted by b'sehacure'
b'CSRF on add comment section'

12 Apr 2014 timeline

b'Phabricator' disclosed a bug submitted by b'dawidczagan'
b'Control character allowed in username'

12 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'internetwache'
b'Lighttpd version disclosure / directory listing'

12 Apr 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo'
b'Leaking Referrer in Reset Password Link'

12 Apr 2014 timeline

1 ... 765 766 767 768 769 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.