The unofficial HackerOne disclosure Timeline

b'Legal Robot' disclosed a bug submitted by b'goodhackonly'
b'2FA user enumeration via login'

08 Aug 2017 timeline

b'Mixmax' disclosed a bug submitted by b'faisal2542'
b'Public calendar link can be invisible'

07 Aug 2017 timeline

b'Ruby' disclosed a bug submitted by b'sandeep_hodkasia'
b'Open aws s3 bucket s3://rubyci'

06 Aug 2017 timeline

b'WakaTime' disclosed a bug submitted by b'asaxena2190'
b'Impersonation of Wakatime user using Invitation functionality.'

06 Aug 2017 timeline

b'Starbucks' disclosed a bug submitted by b'ynsy'
b'Full Api Access and Run All Functions via Starbucks App'

06 Aug 2017 timeline

b'Dropbox' disclosed a bug submitted by b'leovin'
b'Missing URL sanitization in comments can be leveraged for phishing'

04 Aug 2017 timeline

b'Khan Academy' disclosed a bug submitted by b'utkarsh123'
b'Password Functionality not working correctly'

03 Aug 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer'
b'CSRF Vulnerability allows attackers to steal SocialClub private token.'

03 Aug 2017 timeline

b'Kaspersky Lab' disclosed a bug submitted by b'huntman'
b'In App purchase Hack '

03 Aug 2017 timeline

b'Phabricator' disclosed a bug submitted by b'luke081515'
b'Credential gets exposed'

02 Aug 2017 timeline

b'Coinbase' disclosed a bug submitted by b'mohammad_obaid'
b'Device confirmation Flaw'

02 Aug 2017 timeline

b'Revive Adserver' disclosed a bug submitted by b'pavanw3b'
b'Reflected XSS in Step 2 of the Installation'

02 Aug 2017 timeline

b'Revive Adserver' disclosed a bug submitted by b'pavanw3b'
b'Stored XSS on Admin Access Page - Email field'

02 Aug 2017 timeline

b'Revive Adserver' disclosed a bug submitted by b'pavanw3b'
b'Reflected XSS on Zones > Invocation Code'

02 Aug 2017 timeline

b'Revive Adserver' disclosed a bug submitted by b'pavanw3b'
b'Weak Forgot Password implementation'

02 Aug 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'ramsexy'
b'Email link poisoning / Host header attack'

01 Aug 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'stefanofindsbugs'
b'Reflected XSS on www.boozt.com'

01 Aug 2017 timeline

b'WakaTime' disclosed a bug submitted by b'tikoo_sahil'
b"Bypassing Access control, changing owner's name in a private leaderboard"

31 Jul 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'goodhackonly'
b'Missing link to TOTP manual enroll option'

31 Jul 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'goodhackonly'
b'Enhancement: email confirmation for 2FA recovery'

31 Jul 2017 timeline

1 ... 563 564 565 566 567 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.