The unofficial HackerOne disclosure Timeline

b'RelateIQ' disclosed a bug submitted by b'anshuman_bh'
b'RelateIQ GWT based application visible to unauthenticated users'

11 Apr 2014 timeline

wont-fix

b'Phabricator' disclosed a bug submitted by b'goldshlager'
b'OAuth access_token stealing in Phabricator'

11 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'squirmy'
b'Full Path Disclosure on [smarthistory.khanacademy.org]'

11 Apr 2014 timeline

b'Faceless' disclosed a bug submitted by b'atom'
b'Blocking yourself'

11 Apr 2014 timeline

b'IRCCloud' disclosed a bug submitted by b'chmosama'
b'DNS Misconfiguration'

11 Apr 2014 timeline

b'Slack' disclosed a bug submitted by b'pwndizzle'
b'User impersonation is possible with incoming webhooks'

10 Apr 2014 timeline

wont-fix

b'OkCupid' disclosed a bug submitted by b'melvin'
b'Users can easily be tricked into changing/disabling privacy and notification settings'

09 Apr 2014 timeline

b'OkCupid' disclosed a bug submitted by b'smiegles'
b'https://www.okcupid.com/hidden-users CSRF vulnerability.'

09 Apr 2014 timeline

b'OkCupid' disclosed a bug submitted by b'nahamsec'
b'XSS in "Questions" search module'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'http://smarthistory.khanacademy.org/search-results.html XSS'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'Dom based XSS https://www.khanacademy.org/'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'https://www.khanacademy.org/login open-redirect'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'Stored XSS {dangerous?} https://www.khanacademy.org/coach/roster/?listId=allStudents'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'https://www.khanacademy.org/coach/reports/activity XSS'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'smiegles'
b'Persistent class XSS [the fuck]'

09 Apr 2014 timeline

b'concrete5' disclosed a bug submitted by b'g4mm4'
b'https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'chmosama'
b'Weak Ciphers Enabled'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'atom'
b'Open Redirection in SmartHistory KhanAcademy'

09 Apr 2014 timeline

b'Khan Academy' disclosed a bug submitted by b'prakharprasad'
b'XSS at http://smarthistory.khanacademy.org'

09 Apr 2014 timeline

b'Factlink' disclosed a bug submitted by b'jobert'
b'Proxy discloses internal web servers'

08 Apr 2014 timeline

1 ... 769 770 771 772 773 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.