The unofficial HackerOne disclosure Timeline

b'Urban Dictionary' disclosed a bug submitted by b'tcpiplab'
b'Session replay vulnerability in www.urbandictionary.com'

20 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'rammarj'
b'Improper validation of unicode characters'

19 Jun 2017 timeline

b'Gratipay' disclosed a bug submitted by b'4w3'
b'CSP Policy Bypass and javascript execution Still Not Fixed'

19 Jun 2017 timeline

b'Discourse' disclosed a bug submitted by b'marpo'
b'SSRF in upload IMG through URL'

18 Jun 2017 timeline

b'Gratipay' disclosed a bug submitted by b'athuljayaram'
b'CSP Policy Bypass and javascript execution'

18 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'dsopas'
b'Reflected XSS on business-blog.zomato.com - Part 2'

18 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'dsopas'
b'Reflected XSS on business-blog.zomato.com - Part I'

18 Jun 2017 timeline

b'VK.com' disclosed a bug submitted by b'lincoln9932'
b'???????? ?? ????? ?????? ???????????? ?? ??? ?????, ???? ?? ???????? ?? ??????. https://vk.com/al_video.php'

17 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'iampwned'
b'XSS in flashmediaelement.swf (business-blog.zomato.com)'

17 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'iampwned'
b'MailPoet Newsletters <= 2.7.2 - Authenticated Reflected Cross-Site Scripting (XSS)'

17 Jun 2017 timeline

b'Udemy' disclosed a bug submitted by b'n0rb3r7'
b'Completed Compromise & Source Code Disclosure via Exposed Jenkins Dashboard at https://jenkins101.udemy.com'

17 Jun 2017 timeline

b'Gratipay' disclosed a bug submitted by b'h1_gnost'
b'Email Spoofing'

17 Jun 2017 timeline

b'Discourse' disclosed a bug submitted by b'arkadiyt'
b'Any authenticated user can download full list of users, including email'

17 Jun 2017 timeline

b'Mixmax' disclosed a bug submitted by b'syntaxerror'
b'Privilege escalation-User who does not have access is able to add notes to the contact'

16 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Blind SQLi vulnerability in a DoD Website'

16 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jon_bottarini'
b'Information disclosure vulnerability on a DoD website'

16 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Information disclosure vulnerability on a DoD website'

16 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Information disclosure vulnerability on a DoD website'

16 Jun 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Information disclosure vulnerability on a DoD website'

16 Jun 2017 timeline

b'ExpressionEngine' disclosed a bug submitted by b'strukt'
b'Open redirects protection bypass'

16 Jun 2017 timeline

1 ... 570 571 572 573 574 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.