The unofficial HackerOne disclosure Timeline

b'Node.js third-party modules' disclosed a bug submitted by b'bayotop'
b'[html-janitor] Passing user-controlled data to clean() leads to XSS'

09 Feb 2018 timeline

b'RubyGems' disclosed a bug submitted by b'exploit_in'
b'RCE,SQL,Vulnerability + Exploit Method.'

08 Feb 2018 timeline

b'RubyGems' disclosed a bug submitted by b'gorkhali'
b'Host Header Injection/Redirection'

08 Feb 2018 timeline

b'RubyGems' disclosed a bug submitted by b'bugs3ra'
b'Host header Injection rubygems.org'

08 Feb 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'icewater'
b'Registered users can change app password permissions for any user'

08 Feb 2018 timeline

b'Unikrn' disclosed a bug submitted by b'moritz30'
b'Non-Cloudflare IPs allowed to access origin servers'

07 Feb 2018 timeline

b'Ruby on Rails' disclosed a bug submitted by b'joernchen'
b'Unsafe Query Generation (CVE-2012-2660, CVE-2012-2694 and CVE-2013-0155) mitigation bypass'

07 Feb 2018 timeline

b'HackerOne' disclosed a bug submitted by b'kunal94'
b'ImageMagick GIF coder vulnerability leading to memory disclosure'

07 Feb 2018 timeline

b'Shopify' disclosed a bug submitted by b'cache-money'
b'Ability to bypass partner email confirmation to take over any store given an employee email'

07 Feb 2018 timeline

b'RBKmoney' disclosed a bug submitted by b'dutchgraa'
b'DOM-based Cross-Site Scripting in redirect url checkout'

07 Feb 2018 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'kunal94'
b'Concourse.ci for cloud.gov can be logged in and accessible'

07 Feb 2018 timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'reptou'
b'Unrestricted access to Eureka server on ??????'

06 Feb 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b'Blind XXE on my.mail.ru'

06 Feb 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'bayotop'
b'[html-janitor] Bypassing sanitization using DOM clobbering'

05 Feb 2018 timeline

b'Rockstar Games' disclosed a bug submitted by b'h1danilabs'
b'Leak IP internal'

05 Feb 2018 timeline

b'WordPress' disclosed a bug submitted by b'hackerwahab'
b'UnResolved ChangeSet are Visible to Public That also Causes Information Disclosure'

05 Feb 2018 timeline

b'QIWI' disclosed a bug submitted by b'tsug0d'
b'apache access.log leakage via long request on https://rapida.ru/'

05 Feb 2018 timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'severus'
b'Leak ?????????? information in real time through API request'

03 Feb 2018 timeline

b'WordPress' disclosed a bug submitted by b'abdullah'
b'Stored XSS in WordPress'

02 Feb 2018 timeline

b'HackerOne' disclosed a bug submitted by b'aidantwoods'
b'Reputation gain split by company can be used to track the existence of otherwise undisclosed reports'

02 Feb 2018 timeline

1 ... 516 517 518 519 520 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.