The unofficial HackerOne disclosure Timeline

b'Yelp' disclosed a bug submitted by b'edio'
b"Firefly's verify_access_token() function does a byte-by-byte comparison of HMAC values."

10 Jul 2017 timeline

b'Pornhub' disclosed a bug submitted by b'kenziy'
b'pornhub.com/user/welcome/basicinfo nickname field is vulnerable on xss'

10 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'abhiram'
b'by pass rate limit exceed '

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'karthic'
b'Usernames ending in .json are not restricted'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'karthic'
b'x-xss protection header is not set in response header'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'yodha'
b'Lack of CSRF token validation at server side'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'd4rk_g1rl'
b'CSP "script-src" includes "unsafe-inline" in https://gratipay.com'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'a5tronaut'
b'prevent content spoofing on /~username/emails/verify.html'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'mkd1r'
b'SSl Weak Ciphers'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'yodha'
b'Insecure Transportation Security Protocol Supported (TLS 1.0)'

10 Jul 2017 timeline

b'Gratipay' disclosed a bug submitted by b'tanvi07'
b'self cross site scripting'

10 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'anurag98'
b'Session Duplication due to Broken Access Control'

10 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'lincoln9932'
b'?????????? ???????????, ??????? ???????????? ?????-???? ???????? ? ??. '

09 Jul 2017 timeline

b'VK.com' disclosed a bug submitted by b'lincoln9932'
b'CSRF ?? ????? ????? ??????????.'

09 Jul 2017 timeline

b'ICQ' disclosed a bug submitted by b'norver'
b'????????: https://hackerone.com/reports/219171 (?????? ? ????????, ????? ????? ??????)'

09 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'saikiran-10097'
b'Blocking users to sign up on the site'

08 Jul 2017 timeline

b'Informatica' disclosed a bug submitted by b'albinowax'
b'[alpha.informatica.com] Expensive DOMXSS'

08 Jul 2017 timeline

b'Greenhouse.io' disclosed a bug submitted by b'cyneox'
b'Open Redirect in <customer>.greenhouse.io'

08 Jul 2017 timeline

b'Pornhub' disclosed a bug submitted by b'sp1d3rs'
b'Stored XSS in the any user profile using website link'

07 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'anurag98'
b'Session Duplication due to Improper Validation'

07 Jul 2017 timeline

1 ... 564 565 566 567 568 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.