The unofficial HackerOne disclosure Timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'babayaga_'
b'Stored XSS in dev-ucrm-billing-demo.ubnt.com In Client Custom Attribute '

30 Dec 2017 timeline

b'Mavenlink' disclosed a bug submitted by b'ruvlol'
b'Uninitialized server memory disclosure via ImageMagick gif parser'

30 Dec 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'teemuk'
b'Multiple Vulnerabilities in Oracle Webcenter Sites (/cs/Satellite)'

29 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'napalube'
b'CSRF. ???????? ???????? ?????, ?????????? ?????????'

29 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'bytehope'
b'??? ???????? ? ID ????????? ???????? ?????, ?????????? ????? ??????-?? ??????.'

29 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ras-it'
b'Reflected XSS in https://e.mail.ru/'

28 Dec 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'fa1rlight'
b'Stored XSS via Send crew invite'

28 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'haxta4ok00'
b'[et.mail.ru] ssrf 2'

28 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'pwnsdx'
b'XSS when replying / forwarding to a malicious email on iOS'

28 Dec 2017 timeline

b'Uber' disclosed a bug submitted by b'ss3'
b'Design Issue at riders.uber.com/profile'

28 Dec 2017 timeline

b'Zomato' disclosed a bug submitted by b'prateek_0490'
b'[www.zomato.com] IDOR - Delete/Deactivate ANY/ALL Promos through a Post Request at **clients/promoDataHandler.php**'

28 Dec 2017 timeline

b'Zomato' disclosed a bug submitted by b'prateek_0490'
b'Admin Access to a Clone of Zomato Dashboard giving access to each and every Zomato Database'

28 Dec 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'dgaletic'
b'Invalid read leading to a segfault'

28 Dec 2017 timeline

b'Zomato' disclosed a bug submitted by b'chriszielinski'
b'User Profiles Leak PII in HTML Document for Mobile Browser User Agents'

28 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'dzmitry'
b'Download attachments with traversal path into any sdcard directory (incomplete fix 106097)'

28 Dec 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'putsi'
b'High server resource usage on captcha (viestinta.lahitapiola.fi)'

27 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'luigigubello'
b'touch.mail.ru/messages - Stored XSS'

27 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b'Unupdated ImageMagic leads to uninitialized server memory disclosure '

27 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b'Stored XSS and html injection in biz.mail.ru'

27 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b"A manager of a determinate group of users still might have access to any user account from any group that he doesn't administrate anymore."

27 Dec 2017 timeline

1 ... 512 513 514 515 516 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.