The unofficial HackerOne disclosure Timeline

b'The Internet' disclosed a bug submitted by b'dor1s'
b'Race Conditions in OAuth 2 API implementations'

19 Sep 2017 timeline

b'Zomato' disclosed a bug submitted by b'nbsp'
b"Unauthorized update of merchants' information via /php/merchant_details.php"

19 Sep 2017 timeline

b'Zomato' disclosed a bug submitted by b'gerben_javado'
b'[www.zomato.com] Union SQLi + Waf Bypass'

19 Sep 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'fa1rlight'
b'Stored XSS with CRLF injection via post message to user feed'

18 Sep 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'0x0luke'
b'Stored XSS on member post feed'

18 Sep 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'niko00'
b'booztfashion.com URL should HTTPS'

18 Sep 2017 timeline

b'Tor' disclosed a bug submitted by b'janu123'
b'Sql query disclosure,'

18 Sep 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'betterknowme'
b'UX: JS error on Password Safety link'

17 Sep 2017 timeline

b'Automattic' disclosed a bug submitted by b'isaeva'
b'https://secure.gravatar.com'

17 Sep 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'd4rk_g1rl'
b'Homograph IDNs displayed in Description'

16 Sep 2017 timeline

b'Yelp' disclosed a bug submitted by b'coder13'
b'Verification of email addresses possible through https://www.yelp.com/signup/facebook'

16 Sep 2017 timeline

b'Weblate' disclosed a bug submitted by b'kaamakya'
b'DKIM records not present, Email Hijacking is possible.....'

16 Sep 2017 timeline

b'Weblate' disclosed a bug submitted by b'alyanwarr'
b'Missing Restriction On String Size'

16 Sep 2017 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs'
b'Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov'

16 Sep 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'babayaga_'
b'IDOR unsubscribe Anyone from NextClouds Newsletters by knowing their Email '

16 Sep 2017 timeline

b'Perl (IBB)' disclosed a bug submitted by b'mipu94'
b'Use-after-free in XML::LibXML::Node::replaceChild'

16 Sep 2017 timeline

b'Automattic' disclosed a bug submitted by b'slavco'
b'woocommerce - prevent_caching() bug / bypass'

16 Sep 2017 timeline

b'Cuvva' disclosed a bug submitted by b'leet-boy'
b"Insecure Direct Object Reference (IDOR) Allowing me to claim other user's photos (driving license and selfies) as mine"

15 Sep 2017 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs'
b'Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)'

15 Sep 2017 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'sp1d3rs'
b'HTML injection (with XSS possible) on the https://www.data.gov/issue/ using media_url attribute'

15 Sep 2017 timeline

1 ... 549 550 551 552 553 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.