The unofficial HackerOne disclosure Timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'netfuzzer'
b'Dom based xss affecting all pages from https://www.grab.com/.'

17 Aug 2017 timeline

b'Unikrn' disclosed a bug submitted by b'yaworsk'
b'Urgent: Server side template injection via Smarty template allows for RCE'

17 Aug 2017 timeline

b'Weblate' disclosed a bug submitted by b'ashish_r_padelkar'
b'Csrf in watch-unwatch projects'

17 Aug 2017 timeline

b'Weblate' disclosed a bug submitted by b'blake12356'
b'Error Message When Changing Username'

17 Aug 2017 timeline

b'Zomato' disclosed a bug submitted by b'gerben_javado'
b'[api.zomato.com] Login to any account with the emailaddress'

17 Aug 2017 timeline

b'Moneybird' disclosed a bug submitted by b'azizs3curity'
b'Stored XSS at Moneybird'

17 Aug 2017 timeline

b'HackerOne' disclosed a bug submitted by b'ericlaw'
b'Missing Certificate Authority Authorization rule'

17 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'attacker911'
b'Password reset access control'

16 Aug 2017 timeline

b'Quora' disclosed a bug submitted by b'imran-parray'
b'Possibility of DOS Through logging System'

16 Aug 2017 timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'vagg-a-bond'
b'[parcel.grab.com] DOM XSS at /assets/bower_components/lodash/perf/'

16 Aug 2017 timeline

b'Moneybird' disclosed a bug submitted by b'bogdantcaciuc'
b'Moneybird customers invoices leak in cacheable urls'

16 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'hulskar'
b'Tampering the mail id on chatbox'

16 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'samczsun'
b'Improper validation of parameters while creating issues'

16 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'ashishag29'
b'Password Reset page Session Fixation'

16 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00'
b'TabNabbing issue (due to taget=_blank)'

16 Aug 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'samczsun'
b'Update any profile'

16 Aug 2017 timeline

b'Mapbox' disclosed a bug submitted by b'sahilsaif'
b'Blind XSS in mapbox.com/contact'

15 Aug 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'eugui'
b'Insecure Direct Object Reference (IDOR) vulnerability in a DoD website'

15 Aug 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tcpiplab'
b'SQL Injection vulnerability in a DoD website'

15 Aug 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Cross-site scripting (XSS) vulnerability on a DoD website'

15 Aug 2017 timeline

1 ... 556 557 558 559 560 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.