The unofficial HackerOne disclosure Timeline

b'Mapbox' disclosed a bug submitted by b'mishre'
b'Mapbox Android SDK uses Broadcast Receiver instead of Local Broadcast Manager'

21 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'edio'
b'Content-Length restriction bypass to heap overflow in gip.rocks.'

20 Mar 2017 timeline

b'Uber' disclosed a bug submitted by b'solardiz'
b"pam-ussh may be tricked into using another logged in user's ssh-agent"

20 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b's_p_q_r'
b'Avoid "resend verification email" confusion'

20 Mar 2017 timeline

b'ok.ru' disclosed a bug submitted by b'4lemon'
b'Stored XSS ? ????? ????? (2) ?? ????????? ?????.'

20 Mar 2017 timeline

b'ok.ru' disclosed a bug submitted by b'4lemon'
b'???????=>?????? ?????, ??????? ?? ????????????? ??? ???????'

20 Mar 2017 timeline

b'Trello' disclosed a bug submitted by b'rashedhasan007'
b'Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com'

20 Mar 2017 timeline

b'Trello' disclosed a bug submitted by b'rashedhasan007'
b'Email authentication token fails to expire and can be used multiple times for same Email address on Trello.com'

20 Mar 2017 timeline

b'Xero' disclosed a bug submitted by b'atik-rahman'
b'Open-redirect on login.xero.com '

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'intricate'
b'Open Redirect '

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'nuc'
b'Cache purge requests are not authenticated'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'xiaulhxsnain'
b'Session Hijacking '

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'sinkmanu'
b'XSS in a newrelic.com site'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'kamil_hism'
b'JIRA account misconfig causes internal info leak'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'amit29sept'
b'CSRF - Delete all empty application policy'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'amit29sept'
b'CSRF- delete all empty server policy'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'geeknik'
b'https://rpm.newrelic.com/login vulnerable to host header attack'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'daniyal_nasir'
b'No Rate Limitation on Promo Code'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'itly'
b'Reflected XSS on Signup Page'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'apt'
b'Unauthorized Access'

20 Mar 2017 timeline

1 ... 569 570 571 572 573 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.