The unofficial HackerOne disclosure Timeline

b'Zendesk' disclosed a bug submitted by b'yckul'
b'Secret API Key Leakage via Query String'

20 Dec 2017 timeline

b'Zendesk' disclosed a bug submitted by b'sergeym'
b'dom based xss in *.zendesk.com/external/zenbox/'

20 Dec 2017 timeline

b'Razer US' disclosed a bug submitted by b'edio'
b'Open redirect in razer-id.razerzone.com via the redirect parameter.'

20 Dec 2017 timeline

b'Razer US' disclosed a bug submitted by b'niwasaki'
b'Reflected XSS in razer-id.razerzone.com'

20 Dec 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b'Possibility to view subdepartments for arbitrary domain'

20 Dec 2017 timeline

b'Inflection' disclosed a bug submitted by b'protector47'
b'Goodhire Open Redirect'

20 Dec 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'mrtuxracer'
b'UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLs'

20 Dec 2017 timeline

b'Ed' disclosed a bug submitted by b'karel_origin'
b'Fix for self-DoS in Security-txt Chrome Extension.'

19 Dec 2017 timeline

b'Open-Xchange' disclosed a bug submitted by b'dejavuln'
b'OX Guard: DOM Based Cross-Site Scripting'

19 Dec 2017 timeline

b'Open-Xchange' disclosed a bug submitted by b'dejavuln'
b'OX Guard: DOM Based Cross-Site Scripting (#2)'

19 Dec 2017 timeline

b'Deconf' disclosed a bug submitted by b'0ways'
b'Unauthenticated Reflected XSS in admin dashboard'

19 Dec 2017 timeline

b'Shopify' disclosed a bug submitted by b'protector47'
b'Cross-site scripting in "Contact customer" form'

19 Dec 2017 timeline

b'Ruby' disclosed a bug submitted by b'staaldraad'
b'NET::Ftp allows command injection in filenames'

19 Dec 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'shankar'
b'Non-secure requests are not automatically upgraded to HTTPS'

19 Dec 2017 timeline

b'Ed' disclosed a bug submitted by b'sp1d3rs'
b'Chrome Extension is vulnerable to the self-DOS issues in case it process the security.txt with a big size'

18 Dec 2017 timeline

b'Informatica' disclosed a bug submitted by b'shogunlab'
b'[marketplace.informatica.com] - Sensitive Data Exposure '

18 Dec 2017 timeline

b'SEMrush' disclosed a bug submitted by b'bughunterboy'
b'Cross-origin resource sharing misconfig | steal user information '

17 Dec 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pureevil'
b'X-XSS-Protection -> Misconfiguration'

15 Dec 2017 timeline

b'Ruby' disclosed a bug submitted by b'sam1166'
b'Provide a security sistem most fit to our team'

15 Dec 2017 timeline

b'Ruby' disclosed a bug submitted by b'sam1166'
b'Take back my all data from limfuimay@gmail.com'

15 Dec 2017 timeline

1 ... 524 525 526 527 528 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.