readme.md

Title

Password Reset page Session Fixation

URL

https://hackerone.com/reports/255020

Severity score

null

Reporter

ashishag29

Bounty paid

null

---

Title

Affiliates - Session Fixation

URL

https://hackerone.com/reports/737058

Severity score

null

Reporter

jair

Bounty paid

null

---

Title

H1514 Session Fixation on multiple shopify-built apps on *.shopifycloud.com and *.shopifyapps.com

URL

https://hackerone.com/reports/423136

Severity score

null

Reporter

filedescriptor

Bounty paid

$5,000

---

Title

Session fixation in password protected public download.

URL

https://hackerone.com/reports/237184

Severity score

3.1

Reporter

frankspierings

Bounty paid

$50

---

Title

Session Fixation

URL

https://hackerone.com/reports/135797

Severity score

null

Reporter

eboda

Bounty paid

$50

---

Title

Pending MFA logins aren't immediatly expired after a password change

URL

https://hackerone.com/reports/743518

Severity score

null

Reporter

ant_pyne

Bounty paid

$50

---

Title

account takeover https://idea.qiwi.com/

URL

https://hackerone.com/reports/464426

Severity score

null

Reporter

circuit

Bounty paid

$300

---

Title

Intercom chat session information persists after logout

URL

https://hackerone.com/reports/249798

Severity score

2.5

Reporter

khizer47

Bounty paid

$20

---

Title

The auth token does not expire on logging out and even after logging out all sessions

URL

https://hackerone.com/reports/247721

Severity score

null

Reporter

whitehattushu

Bounty paid

$100

---