The unofficial HackerOne disclosure Timeline

b'arxius' disclosed a bug submitted by b'isrsahilmk'
b'No SPF/DKIM/DMARC Record for lfil.es'

26 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'harry_mg'
b'Reflected XSS in Zomato Mobile - category parameter'

26 Jun 2017 timeline

b'Dashlane' disclosed a bug submitted by b'kiraak-boy'
b'Missing Access Control(IDOR) To Know LinkedAccounts '

26 Jun 2017 timeline

b'arxius' disclosed a bug submitted by b'cdl'
b'Local File Disclosure via ffmpeg '

25 Jun 2017 timeline

b'Badoo' disclosed a bug submitted by b'alvares97'
b'Arbitrary modification value "session" (Cookie) in badoo.com'

25 Jun 2017 timeline

b'Slack' disclosed a bug submitted by b'boniao_norwin'
b'"a stored xss issue in share post menu"'

25 Jun 2017 timeline

b'Slack' disclosed a bug submitted by b'boniao_norwin'
b'a stored xss issue in https://files.slack.com'

25 Jun 2017 timeline

b'WordPress' disclosed a bug submitted by b'hasanexpert'
b'Vulnerable to clickjacking'

24 Jun 2017 timeline

b'Gratipay' disclosed a bug submitted by b'mr_unknown'
b'Possible User Session Hijack using Invalid HTTPS certificate on inside.gratipay.com domain'

24 Jun 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[kb.informatica.com] DOM based XSS in the bindBreadCrumb function'

24 Jun 2017 timeline

b'VK.com' disclosed a bug submitted by b'neex'
b'local file disclosure via FFmpeg hls processing'

24 Jun 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'zuhnny1'
b'Control characters incorrectly handled on Crew Status Update'

23 Jun 2017 timeline

b'Mixmax' disclosed a bug submitted by b'brdoors4'
b'Design issue with webhook (several) notifications on mixmax.com'

23 Jun 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'titanous'
b'Null pointer dereference with send/method_missing'

23 Jun 2017 timeline

b'Coinbase' disclosed a bug submitted by b'dark_heaven'
b'Open redirect on sign in '

23 Jun 2017 timeline

b'Shopify' disclosed a bug submitted by b'edio'
b'ShopifyAPI is vulnerable to timing attacks.'

23 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahsantahir'
b'Stored cross site scripting (XSS) vulnerability on a DoD website'

23 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahsantahir'
b'Cross-site scripting (XSS) vulnerability on a DoD website'

23 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tcpiplab'
b'Information disclosure vulnerability on a DoD website'

23 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fantam'
b'Reflective XSS vulnerability on a DoD website'

23 Jun 2017 timeline

1 ... 569 570 571 572 573 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.