The unofficial HackerOne disclosure Timeline

b'Legal Robot' disclosed a bug submitted by b'asaxena2190'
b'Null Byte Injection in all fields of Profile'

24 Feb 2018 timeline

b'Twitter' disclosed a bug submitted by b'harisec'
b'Persistent DOM-based XSS in https://help.twitter.com via localStorage'

24 Feb 2018 timeline

b'Snapchat' disclosed a bug submitted by b'abritest'
b'Takeover 2 MAIN DOMAINS of a company Acquired by Snapchat'

23 Feb 2018 timeline

b'Ruby' disclosed a bug submitted by b'edoverflow'
b'Resolv::getaddresses bug that can be abused to bypass security measures. '

23 Feb 2018 timeline

b'Ruby' disclosed a bug submitted by b'finb'
b'Integer Underflow @ ossl_cipher_pkcs5_keyivgen '

23 Feb 2018 timeline

b'Brave Software' disclosed a bug submitted by b'apapedulimu'
b'Bypassing Homograph Attack Using /@ [ Tested On Windows ]'

23 Feb 2018 timeline

b'WordPress' disclosed a bug submitted by b'sp1d3rs'
b'Open Redirect on the nl.wordpress.net'

22 Feb 2018 timeline

b'Razer US' disclosed a bug submitted by b'sp1d3rs'
b'Open redirect on oauth2.razerzone.com caused by server misconfiguration when using triple slash after hostname'

22 Feb 2018 timeline

b'VK.com' disclosed a bug submitted by b'linkks'
b'Opcode Cache'

22 Feb 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'orange'
b'Path Traversal on Resolve-Path'

22 Feb 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'muon4'
b'Verbose error message reveals internal system hostnames, protols and used ports (yrityspalvelu.tapiola.fi)'

22 Feb 2018 timeline

b'RubyGems' disclosed a bug submitted by b'ysx'
b'[gem server] Stored XSS via crafted JavaScript URL inclusion in Gemspec'

22 Feb 2018 timeline

b'Twitter' disclosed a bug submitted by b'omespino'
b'POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)'

22 Feb 2018 timeline

b'Monero' disclosed a bug submitted by b'bugbound'
b'remote access to localhost daemon, can issue jsonrpc commands'

22 Feb 2018 timeline

b'GitLab' disclosed a bug submitted by b'edoverflow'
b'Using GitLab to monitor and hijack domains in mass quantity.'

21 Feb 2018 timeline

b'Inflection' disclosed a bug submitted by b'exception'
b'Open redirect at app.goodhire.com via ReturnUrl parameter'

21 Feb 2018 timeline

b'Inflection' disclosed a bug submitted by b'exception'
b'XSS at https://app.goodhire.com/member/GH.aspx'

21 Feb 2018 timeline

b'SEMrush' disclosed a bug submitted by b'r0p3'
b'Single Sing On - Clickjacking'

21 Feb 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'isaeva'
b"filin.mail.ru user's e-mail address disclosure"

21 Feb 2018 timeline

b'VK.com' disclosed a bug submitted by b'povargek'
b'???????? ?????????? ? ???????? email, ????? ???? ??? ???????????????? ??????-???????????'

20 Feb 2018 timeline

1 ... 504 505 506 507 508 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.