The unofficial HackerOne disclosure Timeline

Dovecot disclosed a bug submitted by k4nik4
Buffer overflow in sha3

27 May 2018 timeline

Snapchat disclosed a bug submitted by esnard
XSS found on Snapchat website

26 May 2018 timeline

Boozt Fashion AB disclosed a bug submitted by ramsexy
[www.boozt.com] - Authentication bypass

25 May 2018 timeline

Instacart disclosed a bug submitted by bigshaq
View & add to cart unlisted items via IDOR

25 May 2018 timeline

Valve disclosed a bug submitted by xpaw
Aapp name leakage on economy history page

24 May 2018 timeline

Valve disclosed a bug submitted by xpaw
Unfiltered input allows for XSS in "Playtime Item Grants" fields

24 May 2018 timeline

Valve disclosed a bug submitted by osintopsec
Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile Name

24 May 2018 timeline

GitLab disclosed a bug submitted by jobert
GitHub import allows user to create child group under existing namespace

24 May 2018 timeline

MyCrypto disclosed a bug submitted by nitesculucian
Missing SPF record for the in scope domain

24 May 2018 timeline

MyCrypto disclosed a bug submitted by pradyumna1998
Missing SPF Records.

24 May 2018 timeline

Mail.Ru disclosed a bug submitted by alex2018frolov
???????? XSS ( API )

23 May 2018 timeline

Mail.Ru disclosed a bug submitted by alex2018frolov
XSS ??????????

23 May 2018 timeline

Shopify disclosed a bug submitted by 0xacb
SSRF in Exchange leads to ROOT access in all instances

23 May 2018 timeline

Bitwarden disclosed a bug submitted by kmodi
Tracking Bitwarden firefox addon users

23 May 2018 timeline

Phabricator disclosed a bug submitted by xiaoyinl
The "Download Raw Diff" URL is viewable by everyone

23 May 2018 timeline

Trello disclosed a bug submitted by slowrabbit
Session can be continuously reused by editting "token" cookie.

23 May 2018 timeline

Starbucks disclosed a bug submitted by bayotop
XSS on https://www.starbucks.co.uk (can lead to credit card theft) (/shop/paymentmethod)

22 May 2018 timeline

VK.com disclosed a bug submitted by trainzment
????? ??????? ???????? ??? ???? ?????????????

22 May 2018 timeline

VK.com disclosed a bug submitted by executor
Reflected XSS ? /al_audio.php

22 May 2018 timeline

1 2 3 ... 279

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.