The unofficial HackerOne disclosure Timeline

LocalTapiola disclosed a bug submitted by billy_blaze
User able to access company details in yrityspalvelu without proper permissions

22 Jun 2018 timeline

Vanilla disclosed a bug submitted by samux
A user can comment in private discussions without having permission to access the discussion

22 Jun 2018 timeline

LocalTapiola disclosed a bug submitted by petruknisme
F5 BIG-IP Cookie Remote Information Disclosure

21 Jun 2018 timeline

Nextcloud disclosed a bug submitted by mandark
The session token in the URL

19 Jun 2018 timeline

LocalTapiola disclosed a bug submitted by ozzyoz
Sitemap causing strain on your Lahitapiola.fi server

19 Jun 2018 timeline

Node.js third-party modules disclosed a bug submitted by greendog
Insecure implementation of deserialization in cryo

19 Jun 2018 timeline

Ubiquiti Networks disclosed a bug submitted by maxpl0it
Format String Vulnerability in the EdgeSwitch restricted CLI

19 Jun 2018 timeline

Ubiquiti Networks disclosed a bug submitted by maxpl0it
Code Execution in restricted CLI of EdgeSwitch

19 Jun 2018 timeline

Ubiquiti Networks disclosed a bug submitted by maxpl0it
Authenticated RCE in ToughSwitch

19 Jun 2018 timeline

Ubiquiti Networks disclosed a bug submitted by maxpl0it
Triggering RCE using XSS to bypass CSRF in PowerBeam M5 300

19 Jun 2018 timeline

Mail.Ru disclosed a bug submitted by w2w
CRLF injection mcs.mail.ru (leads to XSS)

19 Jun 2018 timeline

LocalTapiola disclosed a bug submitted by yasar
Reflected XSS (myynti.lahitapiolarahoitus.fi)

19 Jun 2018 timeline

Shopify disclosed a bug submitted by llt4l
Subdomain Takeover - https://competition.shopify.com/

19 Jun 2018 timeline

VK.com disclosed a bug submitted by trainzment
???????? ????? ??????? ?? ?????

18 Jun 2018 timeline

Zomato disclosed a bug submitted by bagipro
[Zomato Android/iOS] Theft of user session

17 Jun 2018 timeline

Reverb.com disclosed a bug submitted by bagipro
Disclosure of all uploads to Cloudinary via hardcoded api secret in Android app

17 Jun 2018 timeline

ICQ disclosed a bug submitted by iframe
api.icq.com / ??????????? ?????????????? ? ?????? ???? (???? ?????????).

17 Jun 2018 timeline

MapsMarker.com e.U. disclosed a bug submitted by damian89
[Informational] Possible SQL Injection in inc/ajax-actions-frontend.php

17 Jun 2018 timeline

VK.com disclosed a bug submitted by paul-raddoor
[???????? email ? ????????] by admin@notify.vk.com | email-flood

16 Jun 2018 timeline

1 2 3 ... 284

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.