The unofficial HackerOne disclosure Timeline

Node.js third-party modules disclosed a bug submitted by szkrstf
[ponse] Path traversal in ponse module allows to read any file on server

20 Jul 2018 timeline

Valve disclosed a bug submitted by chippy
Malformed .BSP Access Violation in CS:GO can lead to Remote Code Execution

19 Jul 2018 timeline

Shopify disclosed a bug submitted by rijalrojan
Potential SSRF and disclosure of sensitive site on *shopifycloud.com

19 Jul 2018 timeline

Augur disclosed a bug submitted by sorachiace
Subdomain takeover on slack.augur.net pointing to GitHub Pages

19 Jul 2018 timeline

Ruby on Rails disclosed a bug submitted by orange
Path Traversal on Default Installed Rails Application (Asset Pipeline)

19 Jul 2018 timeline

Slack disclosed a bug submitted by irvinlim
HTTP parameter pollution from outdated Greenhouse.io JS dependency

19 Jul 2018 timeline

PortSwigger Web Security disclosed a bug submitted by egyptghost1
Activat burp suite pro with the old license after transfared to anothe account

19 Jul 2018 timeline

Mail.Ru disclosed a bug submitted by diabllo
Race condition ?? market.games.mail.ru

18 Jul 2018 timeline

Node.js third-party modules disclosed a bug submitted by misterch0c
Stored XSS in Node-Red

18 Jul 2018 timeline

Node.js third-party modules disclosed a bug submitted by caioluders
[entitlements] Command injection on the 'path' parameter

18 Jul 2018 timeline

OLX disclosed a bug submitted by d4w
XSS in OLX.pl ("title" in new advertisement)

18 Jul 2018 timeline

HackerOne disclosed a bug submitted by rbcafe
Ajouter le même utilisateur que celui déjà inscrit dans les équipes

17 Jul 2018 timeline

GitLab disclosed a bug submitted by lahataleputih
Potensial SSRF via Git repository URL

16 Jul 2018 timeline

GitLab disclosed a bug submitted by phillycheeze
Persistent XSS - Selecting users as allowed merge request approvers

16 Jul 2018 timeline

GitLab disclosed a bug submitted by phillycheeze
XSS (Persistent) - Selecting role(s) for protected branches

16 Jul 2018 timeline

Mail.Ru disclosed a bug submitted by aietix
Attacker can send requests from mail.ru server

16 Jul 2018 timeline

ICQ disclosed a bug submitted by s3r3n3storm
XSS at https://icq.com/people

16 Jul 2018 timeline

Mail.Ru disclosed a bug submitted by c37hun
CSRF ?? biz.mail.ru

16 Jul 2018 timeline

Ubiquiti Networks disclosed a bug submitted by amans
Two Factor Authentication Bypass

16 Jul 2018 timeline

1 2 3 ... 288

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.