The unofficial HackerOne disclosure Timeline

b'Maximum' disclosed a bug submitted by b'whitesector'
b'xss flash on http://presentatie.werkenbijmcdonalds.nl/'

25 Oct 2017 timeline

b'Inflection' disclosed a bug submitted by b'kiddie'
b'Host Header Injection and Cache Poisoning'

24 Oct 2017 timeline

b'Inflection' disclosed a bug submitted by b'leet-boy'
b'Privilege Escalation.'

24 Oct 2017 timeline

b'Gratipay' disclosed a bug submitted by b'b3nac'
b'Sub Domain Takeover'

24 Oct 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'rey_7'
b'Users Unable to login using Gmail/Facebook on https://boozt-stage1.booztx.com/login'

24 Oct 2017 timeline

b'Tor' disclosed a bug submitted by b'dhiraj-mishra'
b'Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy '

24 Oct 2017 timeline

b'Tor' disclosed a bug submitted by b'xiaoyinl'
b'Preferred language option fingerprinting issue in Tor Browser'

24 Oct 2017 timeline

b'Ian Dunn' disclosed a bug submitted by b'whitehatter'
b'Formula injection via CSV exports in WordCamp Talks plugin'

23 Oct 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'magar'
b'No Confirmation During Email Change'

23 Oct 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'magar'
b'No Session change on Password change'

23 Oct 2017 timeline

b'Zomato' disclosed a bug submitted by b'hextitan'
b'Potential server misconfiguration leads to disclosure of vendor/ directory'

23 Oct 2017 timeline

b'ownCloud' disclosed a bug submitted by b'cybertiger'
b'Banner Grabbing - Apache Server Version Disclousure'

22 Oct 2017 timeline

b'Zomato' disclosed a bug submitted by b'darwinks'
b'IDOR to cancel any table booking and leak sensitive information such as email,mobile number,uuid'

22 Oct 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'miftahabdul2307'
b'Legal Robot'

21 Oct 2017 timeline

b'Tor' disclosed a bug submitted by b'agarri_fr'
b'Use-after-free during XML transformations (MFSA-2016-27)'

21 Oct 2017 timeline

b'Slack' disclosed a bug submitted by b'securinti'
b'Many Slack teams can be joined by abusing an improperly configured support@ inbox'

21 Oct 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'ph0b0s'
b'Non-HTTPS link on blog'

20 Oct 2017 timeline

b'Inflection' disclosed a bug submitted by b'malcolmx'
b'Open Redirect'

20 Oct 2017 timeline

b'Mapbox' disclosed a bug submitted by b'shahmeer-amir'
b"Logging a user into attacker's account using password reset link"

20 Oct 2017 timeline

b'LibSass' disclosed a bug submitted by b'geeknik'
b'stack overflow #6 in libsass'

20 Oct 2017 timeline

1 ... 529 530 531 532 533 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.