The unofficial HackerOne disclosure Timeline

b'WakaTime' disclosed a bug submitted by b'silv3rpoision'
b'Missing filteration of meta characters in all full name field on wakatime.com'

04 Jul 2017 timeline

b'Weblate' disclosed a bug submitted by b'pavanw3b'
b'Invalidate session after password reset - hosted website'

03 Jul 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'n0rb3r7'
b'Remote code execution vulnerability on a DoD website'

03 Jul 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tsug0d'
b'Information disclosure on a DoD website'

03 Jul 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jutsuce'
b'Server-side include injection vulnerability in a DoD website'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'prateek_0490'
b'[https://wakatime.com/reset_password/] Leaking password reset token via referrer'

03 Jul 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit'
b'Default credentials on a DoD website'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'noobboy_77'
b"Sensitive Cookie Without 'HttpOnly' Flag"

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'rony'
b'Session not expired on logout'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'pratyushjanghel'
b'Spamming Email Inbox of Anyone'

03 Jul 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'lalka'
b'Reflected XSS ?? https://aw.mail.ru/news/'

03 Jul 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'lalka'
b'Reflected XSS.'

03 Jul 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'lalka'
b'Reflected XSS.'

03 Jul 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'lalka'
b'Reflected XSS on hi-tech.mail.ru'

03 Jul 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'lalka'
b'XSS ? ??????? ?????????? ??????????????? ?????.'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'diti'
b'No rate limit when creating new goals [https://wakatime.com/goals]'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'sp1d3rs'
b'JSON CSRF on the https://api.wakatime.com/api/v1/ (example with the time logging).'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'b3nac'
b'IDOR create accounts and verify them with original account email'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'b3nac'
b'No redirect uri for Twitter Oath resulting in token leak'

03 Jul 2017 timeline

b'WakaTime' disclosed a bug submitted by b'silv3rpoision'
b'No notificatoin sent on email after account deletion.'

03 Jul 2017 timeline

1 ... 565 566 567 568 569 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.