The unofficial HackerOne disclosure Timeline

GitLab disclosed a bug submitted by nyangawa
Local files could be overwritten in GitLab, leading to remote command execution

17 Jul 2019 timeline

Maximum disclosed a bug submitted by sicarius
Wrong link on corne.maximum.nl

16 Jul 2019 timeline

Ian Dunn disclosed a bug submitted by littlegeek
xmlrpc.php FILE IS enable on Main website

16 Jul 2019 timeline

Grammarly disclosed a bug submitted by metnew
`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension

15 Jul 2019 timeline

Shopify disclosed a bug submitted by modam3r5
any staff members have the ability to comment in [discounts] he/she can disable comment section it to other staff even the admin of the store

15 Jul 2019 timeline

Vanilla disclosed a bug submitted by alb3r7
Unsanitized user photo paths allow local file read

13 Jul 2019 timeline

Vanilla disclosed a bug submitted by alb3r7
Stored XSS in vanilla

13 Jul 2019 timeline

Maximum disclosed a bug submitted by page1337
Sql-inj in https://maximum.com/ajax/people

12 Jul 2019 timeline

Informatica disclosed a bug submitted by modam3r5
[https://life.informatica.com] - information disclose

12 Jul 2019 timeline

Smule disclosed a bug submitted by dhakalananda
Missing Rate Limit in Password Change

12 Jul 2019 timeline

VK.com disclosed a bug submitted by cheatboss
??????????? ?????? ? ???????? ???? ?? ?????? ???? ?? ??? ????? ?? ???????.

11 Jul 2019 timeline

VK.com disclosed a bug submitted by cheatboss
???????? ????? ?????? ?? ?? ????.

11 Jul 2019 timeline

HackerOne disclosed a bug submitted by neema
View HackerOne challenge scope before challenge begins

11 Jul 2019 timeline

Tube8 disclosed a bug submitted by sp1d3rs
Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)

11 Jul 2019 timeline

Rocket.Chat disclosed a bug submitted by sanjogpanda
Slack Token exposed over internet (Github)

11 Jul 2019 timeline

Dropbox disclosed a bug submitted by hanno
Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack

10 Jul 2019 timeline

VHX disclosed a bug submitted by sp1d3rs
Possibility to overwrite any file in the vpe.cdn.vimeo.tv leads to the Stored XSS for the all customers on the embed.vhx.tv

10 Jul 2019 timeline

Maximum disclosed a bug submitted by lewerkun
Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080

10 Jul 2019 timeline

Maximum disclosed a bug submitted by 0xradi
Ability To Takeover any account by Emaill.

10 Jul 2019 timeline

1 2 3 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.