The unofficial HackerOne disclosure Timeline

b'Parrot Sec' disclosed a bug submitted by b'no_body_cares'
b'http://lists.parrotsec.org vulnerable to MITM'

28 Jun 2017 timeline

b'Moneybird' disclosed a bug submitted by b'mattweidner'
b'Webhook allows sending payload using insecure HTTP protocol'

28 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'abiral'
b'Captcha bypass at registration'

28 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'abiral'
b'Adding Email lacks Password validation'

28 Jun 2017 timeline

b'Uber' disclosed a bug submitted by b'temmyscript'
b'deleting payment profile during active trip puts account into arrears but active trip is temporarily \xe2\x80\x9cfree\xe2\x80\x9d'

28 Jun 2017 timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'XSS on $shop$.myshopify.com/admin/ and partners.shopify.com via whitelist bypass in SVG icon for sales channel applications'

27 Jun 2017 timeline

b'Shopify' disclosed a bug submitted by b'yaworsk'
b'API Webhooks Fire And Are Unlisted After Permissions Removed'

27 Jun 2017 timeline

b'Mixmax' disclosed a bug submitted by b'joshualaurencio'
b'Improper parsing of input could lead to future XSS vulnerabilities in Sequences'

27 Jun 2017 timeline

b'Starbucks' disclosed a bug submitted by b'bayotop'
b'Stored XSS in comments on https://www.starbucks.co.uk/blog/*'

27 Jun 2017 timeline

b'Shopify' disclosed a bug submitted by b'ashish_r_padelkar'
b'Redirect in adding advance cash on delivery app'

27 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'brdoors3'
b'Password token validation in https://demo.weblate.org/'

27 Jun 2017 timeline

b'Shopify' disclosed a bug submitted by b'jamesclyde'
b'Stored XSS in *.myshopify.com'

27 Jun 2017 timeline

b'arxius' disclosed a bug submitted by b'strukt'
b'Open redirects protection bypass'

27 Jun 2017 timeline

b'arxius' disclosed a bug submitted by b'mickeyhex'
b'Disclose of phpmyadmin'

27 Jun 2017 timeline

b'arxius' disclosed a bug submitted by b'neex'
b'another local file disclosure via ffmpeg'

26 Jun 2017 timeline

b'YouPorn' disclosed a bug submitted by b'myst404'
b'XSS via login cookie'

26 Jun 2017 timeline

b'Pornhub' disclosed a bug submitted by b'txt3rob'
b'XSS on pornhubselect.com'

26 Jun 2017 timeline

b'arxius' disclosed a bug submitted by b'isrsahilmk'
b'No SPF/DKIM/DMARC Record for lfil.es'

26 Jun 2017 timeline

b'Zomato' disclosed a bug submitted by b'harry_mg'
b'Reflected XSS in Zomato Mobile - category parameter'

26 Jun 2017 timeline

b'Dashlane' disclosed a bug submitted by b'kiraak-boy'
b'Missing Access Control(IDOR) To Know LinkedAccounts '

26 Jun 2017 timeline

1 ... 574 575 576 577 578 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.