The unofficial HackerOne disclosure Timeline

b'Twitter' disclosed a bug submitted by b'filedescriptor'
b'CSRF on Periscope Web OAuth authorization endpoint '

26 Jul 2017 timeline

b'WordPress' disclosed a bug submitted by b'jon_bottarini'
b'Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter '

26 Jul 2017 timeline

b'Keybase' disclosed a bug submitted by b'jupenur'
b'Universal Cross-Site Scripting in Keybase Chrome extension'

26 Jul 2017 timeline

b'Starbucks' disclosed a bug submitted by b'an0n-j'
b'Reflected XSS in openapi.starbucks.com /searchasyoutype/v1/search?x-api-key='

25 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'lincoln9932'
b'?????? ???????? ??????? ?????? ? ?? ???????? ?? ???????????.'

25 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'mrreboot'
b'Unsafe Inline and Eval CSP Usage'

24 Jul 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'lalka'
b'PHP info page disclosure on http://www.day.dk/'

24 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'silv3rpoision'
b'https://wakatime.com/ website CSP "script-src" includes "unsafe-inline"'

24 Jul 2017 timeline

b'Imgur' disclosed a bug submitted by b'vinothkumar'
b'Login to any user account using other facebook app access token '

24 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'silv3rpoision'
b'Password token validation in https://wakatime.com/'

24 Jul 2017 timeline

b'Phabricator' disclosed a bug submitted by b'aliashber'
b'Hyper Link Injection In email and Space Characters Allowed at Password Field.'

23 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'silv3rpoision'
b'Password reset links should expire after being used, instead of at specific time'

23 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'povargek'
b'????? 2FA Bypass'

23 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'pisarenko'
b'??? ??????? ?? ?????????? ????? ? ???????? ????????????'

23 Jul 2017 timeline

b'Automattic' disclosed a bug submitted by b'csanuragjain'
b'CPU utilization 99% on visiting wordpress site url & open redirect found'

23 Jul 2017 timeline

b'concrete5' disclosed a bug submitted by b'csanuragjain'
b'Content Spoofing possible in concrete5.org'

23 Jul 2017 timeline

b'Dashlane' disclosed a bug submitted by b'csanuragjain'
b'Extract Billing admin email address using random team id'

23 Jul 2017 timeline

b'Udemy' disclosed a bug submitted by b'csanuragjain'
b'Content Spoofing in udemy'

23 Jul 2017 timeline

b'Cuvva' disclosed a bug submitted by b'aliv3'
b'CSRF on cuvva.insure allows to attacker to send multiple SMS to download the app without visiting the cuvva'

23 Jul 2017 timeline

b'Dashlane' disclosed a bug submitted by b'rbcafe'
b'[https://www.dashlane.com] Test Panel Disclosure'

21 Jul 2017 timeline

1 ... 562 563 564 565 566 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.