The unofficial HackerOne disclosure Timeline

New Relic disclosed a bug submitted by niwasaki
WordPress User Enumeration - blog.newrelic.com

19 Jan 2019 timeline

Twitter disclosed a bug submitted by nyuszika7h
Changing email address on Twitter for Android unsets "Protect your Tweets"

18 Jan 2019 timeline

U.S. Dept Of Defense disclosed a bug submitted by websecnl
SOAP WSDL Parser SQL Code Execution

16 Jan 2019 timeline

Dovecot disclosed a bug submitted by mikki_khan
command Injection in rawlog binary

16 Jan 2019 timeline

Mail.ru disclosed a bug submitted by godexmachine
[online.games.mail.ru] - Sensitive information disclosure

16 Jan 2019 timeline

Mail.ru disclosed a bug submitted by godexmachine
[3k.mail.ru] - Content spoofing

16 Jan 2019 timeline

Dropbox disclosed a bug submitted by karlito
Disclose anonymous accessible link on embedded files in paper dropbox sessions

15 Jan 2019 timeline

Weblate disclosed a bug submitted by elmahdi
No Rate Limit On Add new word

14 Jan 2019 timeline

RATELIMITED disclosed a bug submitted by aty
Line feed injection in get request leads AWS S3 Bucket information disclosure

14 Jan 2019 timeline

HackerOne disclosed a bug submitted by jobert
Embedded submission form UUIDs can be enumerated through GraphQL node interface, exposing sensitive program details

11 Jan 2019 timeline

SEMrush disclosed a bug submitted by saya
Persistent CSV injection

11 Jan 2019 timeline

SEMrush disclosed a bug submitted by prial261
protocol & Ports are not shown in third-party site redirect warning page

11 Jan 2019 timeline

U.S. Dept Of Defense disclosed a bug submitted by mik317
Account takeover due to CSRF in "Account details" option on ?????????

11 Jan 2019 timeline

Chaturbate disclosed a bug submitted by imran1121
Unsecure Caching Mechanism May Expose users Credit Card Details

11 Jan 2019 timeline

Starbucks disclosed a bug submitted by debo
SQL Injection Proof of Concept for Starbucks URL

09 Jan 2019 timeline

CFP Time disclosed a bug submitted by drosofraymaybe
Content spoofing on error pages or text injection

08 Jan 2019 timeline

Grabtaxi Holdings Pte Ltd disclosed a bug submitted by phreak
Production secret key leak in config/secrets.yml

08 Jan 2019 timeline

Urban Dictionary disclosed a bug submitted by linkks
Source Code Disclosure

08 Jan 2019 timeline

Valve disclosed a bug submitted by ronak_9889
Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR

07 Jan 2019 timeline

1 2 3 ... 321

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.