Open Bug Bounty Community Forum

metamorfosec_id wrote: ↑

Mon Jun 25, 2018 10:02 pm

Dear Admin,

Why many of my submissions have assigned as "Patched", but they are actually still Not Patched?

Additionally, the appearances of OPENBUGBOUNTY text on screenshoots are also not match with the reality.

Furhermore, the date of Vulnerability Fixed and Public Disclosure are also not appropriate. For example, Vulnerability Fixed on 14 June, but Public Disclosure on 13 June?

I think these issues could made other researchers to see my POCs, but the vulnerability are still not fixed.

I must email OBB manually in order to OBB Team can recheck and fix these issues as soon as possible.

metamorfosec_id wrote: ↑

Tue Jul 17, 2018 6:52 pm

Dear Admin, please check this:

OBB-631935 - Still not fixed, but Vulnerability Fixed on 17 July and Public Disclosure on 14 July. Vulnerability Reported on 14 June.

Thank you

metamorfosec_id wrote: ↑

Fri Jul 20, 2018 11:31 am

Dear Admin, please check these submissions.
Please make them to On Hold because they still not fixed.
Thank you.

OBB-613676 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-616038 (Reported: 13 May, 2018, but Disclosure: 12 June, 2018?)
OBB-616176 (Reported: 14 May, 2018, but Disclosure: 13 June, 2018?)
OBB-621099 (Reported: 24 May, 2018, but Disclosure: 23 June, 2018?)
OBB-622803 (Reported: 26 May, 2018, but Disclosure: 25 June, 2018?)
OBB-623437 (Reported: 28 May, 2018, but Disclosure: 27 June, 2018?)
OBB-624405 (Reported: 29 May, 2018, but Disclosure: 28 June, 2018?)
OBB-626272 (Reported: 3 June, 2018, but Disclosure: 3 July, 2018?) -> solve the CAPTCHA first
OBB-629499 (Reported: 9 June, 2018, but Disclosure: 9 July, 2018?)
OBB-629957 (Reported: 11 June, 2018, but Disclosure: 11 July, 2018?)
OBB-631935 (Reported: 14 June, 2018, but Disclosure: 14 July, 2018?)
OBB-631902 (Reported: 14 June, 2018, but Disclosure: 14 July, 2018?)

Additionally, alerts on screenshots for these submissions are not aligned with the POC (without /../)
OBB-612529 (Reported: 5 May, 2018, but Disclosure: 4 June, 2018?)
OBB-613449 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-613450 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-613452 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-613454 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-613459 (Reported: 7 May, 2018, but Disclosure: 6 June, 2018?)
OBB-614296 (Reported: 9 May, 2018, but Disclosure: 8 June, 2018?)
OBB-614297 (Reported: 9 May, 2018, but Disclosure: 8 June, 2018?)
OBB-614299 (Reported: 9 May, 2018, but Disclosure: 8 June, 2018?)
OBB-614300 (Reported: 9 May, 2018, but Disclosure: 8 June, 2018?)
OBB-614301 (Reported: 9 May, 2018, but Disclosure: 8 June, 2018?)