Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Minr.es' disclosed a bug submitted by b'smilez_hapiez' 
b'Clickjacking: X-Frame-Options header missing'

20 Apr 2014

b'Minr.es' disclosed a bug submitted by b'smilez_hapiez' 
b'Session Cookie without Secure flag set'

20 Apr 2014
wont-fix

b'Localize' disclosed a bug submitted by b'daksh' 
b'Stored XSS'

20 Apr 2014

b'Localize' disclosed a bug submitted by b'smilez_hapiez' 
b'Login page password-guessing attack'

20 Apr 2014

b'Localize' disclosed a bug submitted by b'smilez_hapiez' 
b'Possible sensitive files'

20 Apr 2014

b'Localize' disclosed a bug submitted by b'daksh' 
b'Making groups in any project without permission '

20 Apr 2014

b'Localize' disclosed a bug submitted by b'daksh' 
b'Deleting groups in any project without permission '

20 Apr 2014

b'HackerOne' disclosed a bug submitted by b'javidhussain21' 
b'Session Management'

19 Apr 2014

b'HackerOne' disclosed a bug submitted by b'satishb3' 
b'Session not expired on logout'

19 Apr 2014

b'HackerOne' disclosed a bug submitted by b'mortes' 
b'Flawed account creation process allows registration of usernames corresponding to existing file names'

19 Apr 2014

b'HackerOne' disclosed a bug submitted by b'niks' 
b'A password reset page does not properly validate the authenticity token at the server side.'

19 Apr 2014

b'HackerOne' disclosed a bug submitted by b'wcypierre' 
b"Weird Bug - Ability to see partial of other user's notification"

19 Apr 2014

b'OkCupid' disclosed a bug submitted by b'rizimughal' 
b'DOM based XSS in changing email address'

19 Apr 2014

b'Minr.es' disclosed a bug submitted by b'shahmeer_amir' 
b'OPTIONS method enabled on webserver'

19 Apr 2014

b'Localize' disclosed a bug submitted by b'jackds' 
b'HTML/Javascript possible in "Discussion" section of reviews'

19 Apr 2014

b'Localize' disclosed a bug submitted by b'jackds' 
b'Assigning a non-existing role to user causes exception when opening project page'

19 Apr 2014

b'Localize' disclosed a bug submitted by b'ashesh' 
b'Password type input with auto-complete enabled'

19 Apr 2014
wont-fix

b'Localize' disclosed a bug submitted by b'jeroldcamacho' 
b'CSRF in adding phrase.'

19 Apr 2014

b'Localize' disclosed a bug submitted by b'nahamsec' 
b'Full Path Disclosure'

19 Apr 2014

b'Localize' disclosed a bug submitted by b'siddiki' 
b'Full Path Disclosure (2)'

19 Apr 2014

1 ... 766 767 768 769 770 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM