The unofficial HackerOne disclosure Timeline

Twitter disclosed a bug submitted by csanuragjain
Opportunity to post hidden comments

11 Dec 2018 timeline

RATELIMITED disclosed a bug submitted by hamzamandil
Banner Grabbing - Apache Server Version Disclousure

11 Dec 2018 timeline

RATELIMITED disclosed a bug submitted by hamzamn2098
information disclosure which leak the apache version

11 Dec 2018 timeline

RATELIMITED disclosed a bug submitted by hach3ro
HTTP PUT method enabled

11 Dec 2018 timeline

HackerOne disclosed a bug submitted by haxta4ok00
Inline banner on Report page discloses whether organization runs a private program

11 Dec 2018 timeline

RubyGems disclosed a bug submitted by plover
DNS SRV lookup of file:// sources enables local hijacking of gems

11 Dec 2018 timeline

RATELIMITED disclosed a bug submitted by emitrani
HTTP PUT method enabled

11 Dec 2018 timeline

Twitter disclosed a bug submitted by nahoragg
CORS misconfig | Account Takeover

10 Dec 2018 timeline

RubyGems disclosed a bug submitted by mrunal
Cross-Domain JavaScript Source File Inclusion

10 Dec 2018 timeline

QIWI disclosed a bug submitted by igorpyan
??????????? ??????????? ?? ????? qiwi.com ?? ????? ????? ????????

10 Dec 2018 timeline

MariaDB disclosed a bug submitted by c0rv4x
Github wiki is editable by anyone

10 Dec 2018 timeline

RubyGems disclosed a bug submitted by claudijd
Request Hijacking Vulnerability in RubyGems 2.6.13 and earlier

08 Dec 2018 timeline

RubyGems disclosed a bug submitted by ooooooo_q
65534 times efficient, Brute-force attack for api_key

08 Dec 2018 timeline

OLX disclosed a bug submitted by secpentester1337
XSS Reflected at SEARCH >>

08 Dec 2018 timeline

Khan Academy disclosed a bug submitted by sarmadkhan
Cross site scripting (content-sniffing)

08 Dec 2018 timeline

Nextcloud disclosed a bug submitted by c0rv4x
Github wikis are editable by anyone

07 Dec 2018 timeline

Phabricator disclosed a bug submitted by insufficiententropy
TOTP Key is shorter than RFC 4226 recommended minimum

07 Dec 2018 timeline

SEMrush disclosed a bug submitted by jimgogogo
Stored XSS in '' Section and WAF Bypass

07 Dec 2018 timeline

SEMrush disclosed a bug submitted by ankit_singh
Open Redirect

07 Dec 2018 timeline

1 2 3 ... 316

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.