The unofficial HackerOne disclosure Timeline

b'Legal Robot' disclosed a bug submitted by b'ashishag29'
b'[UX] Notify user on likely email address typo'

10 Oct 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'0x0luke'
b'Stored XSS on support.rockstargames.com'

10 Oct 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'grampae'
b'Directory traversal at https://nightly.ubnt.com'

10 Oct 2017 timeline

b'YouPorn' disclosed a bug submitted by b'platinum1933'
b'youporn email notification enable/disable and newsletter '

09 Oct 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'ruvlol'
b'XSS in biz.mail.ru/error'

09 Oct 2017 timeline

b'GitLab' disclosed a bug submitted by b'naure'
b'CSRF-Token leak by request forgery'

09 Oct 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'tripwire'
b'Exposed API-key allows to control nightly builds of firmwares (????????? & ????????)'

09 Oct 2017 timeline

b'Imgur' disclosed a bug submitted by b'logue'
b'Reflected XSS in m.imgur.com'

07 Oct 2017 timeline

b'WakaTime' disclosed a bug submitted by b'flex0geek'
b'Can link to websites from profile'

07 Oct 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Running 2 accounts with a single email [Part 2]'

07 Oct 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Reset password more than once with a reset link #2'

07 Oct 2017 timeline

b'WakaTime' disclosed a bug submitted by b'flex0geek'
b'password token validation'

07 Oct 2017 timeline

b'Snapchat' disclosed a bug submitted by b'ysx'
b'Subdomain Takeover via Unclaimed WordPress site'

06 Oct 2017 timeline

b'Unikrn' disclosed a bug submitted by b'sp1d3rs'
b'Persistent XSS found on bin.pinion.gg due to outdated FlowPlayer SWF file with Remote File Inclusion vulnerability.'

05 Oct 2017 timeline

b'Unikrn' disclosed a bug submitted by b'wdem'
b'Weak Session ID Implementation - No Session change on Password change'

05 Oct 2017 timeline

b'Gratipay' disclosed a bug submitted by b'sandeepl337'
b'Adding Used Primary Email Address to attacker account and Account takeover'

05 Oct 2017 timeline

b'Weblate' disclosed a bug submitted by b'punkit'
b' Application allowing old password to be set as new password | hosted.weblate.org'

05 Oct 2017 timeline

b'Blockstack' disclosed a bug submitted by b'blash41'
b'Clickjacking https://blockstack.org/'

05 Oct 2017 timeline

b'Weblate' disclosed a bug submitted by b'tungpun'
b'Add another email address without verification'

05 Oct 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'ashish_r_padelkar'
b'Wrong password validation message'

04 Oct 2017 timeline

1 ... 540 541 542 543 544 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.