The unofficial HackerOne disclosure Timeline

b'Automattic' disclosed a bug submitted by b'neex'
b'SSRF and local file disclosure in https://wordpress.com/media/videos/ via FFmpeg HLS processing'

29 Jul 2017 timeline

b'concrete5' disclosed a bug submitted by b'bl4de'
b'Stored XSS in Pages SEO dialog Name field (concrete5 8.1.0)'

27 Jul 2017 timeline

b'Starbucks' disclosed a bug submitted by b'rbcafe'
b'[connect.teavana.com] Open Redirect and abuse of connect.teavana.com'

27 Jul 2017 timeline

b'HackerOne' disclosed a bug submitted by b'inhibitor181'
b"Reading redacted data via hackbot's answers"

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'xpathmaster'
b'Git available containing passwords. '

27 Jul 2017 timeline

b'Greenhouse.io' disclosed a bug submitted by b'ahmed_ezzat_nasr'
b'Content Spoofing on link.greenhouse.io'

27 Jul 2017 timeline

b'Weblate' disclosed a bug submitted by b'blake12356'
b'The username of an account can be ..'

27 Jul 2017 timeline

b'Weblate' disclosed a bug submitted by b'blake12356'
b'No filteration of null characters in name field'

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'koshti25'
b'Broken Authentication and Session Management(Session Fixation)'

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'nightwatch-cybersecurity'
b'Android app does not use SSL for login'

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'abdulwahab'
b'Cookie Misconfiguration'

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'sfsecurityfirst'
b'ADB Backup is enabled within AndroidManifest'

27 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'm7mdharoun'
b'Email spoofing at booztlet.com'

27 Jul 2017 timeline

b'Maximum' disclosed a bug submitted by b'kuton'
b'Open redirect on https://werkenbijdefensie.nl/'

27 Jul 2017 timeline

b'Twitter' disclosed a bug submitted by b'joshbrodienz'
b'XXE on sms-be-vip.twitter.com in SXMP Processor'

26 Jul 2017 timeline

b'Twitter' disclosed a bug submitted by b'filedescriptor'
b'CSRF on Periscope Web OAuth authorization endpoint '

26 Jul 2017 timeline

b'WordPress' disclosed a bug submitted by b'jon_bottarini'
b'Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter '

26 Jul 2017 timeline

b'Keybase' disclosed a bug submitted by b'jupenur'
b'Universal Cross-Site Scripting in Keybase Chrome extension'

26 Jul 2017 timeline

b'Starbucks' disclosed a bug submitted by b'an0n-j'
b'Reflected XSS in openapi.starbucks.com /searchasyoutype/v1/search?x-api-key='

25 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'lincoln9932'
b'?????? ???????? ??????? ?????? ? ?? ???????? ?? ???????????.'

25 Jul 2017 timeline

1 ... 558 559 560 561 562 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.