The unofficial HackerOne disclosure Timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'XSS in $shop$.myshopify.com/admin/ via "Button Objects" in malicious app'

22 May 2017 timeline

b'Cuvva' disclosed a bug submitted by b'd04k34d3v1l'
b'cuvva.com vulnerable to sweet32'

22 May 2017 timeline

b'Maximum' disclosed a bug submitted by b'kieran'
b'IDOR in editing courses'

22 May 2017 timeline

b'Starbucks' disclosed a bug submitted by b'joaomatosf'
b'Java Deserialization RCE via JBoss on card.starbucks.in'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'smit'
b'Missing filteration of meta characters in full name field on registration page https://demo.weblate.org/accounts/register'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'abdelfattah_tcp'
b'ClickJacking'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'ph_spade'
b'Direct IP Access'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b"invalid URL parsing with and '@'"

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on http://blog.owox.com/'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on OWOX.RU'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'k_jagdish'
b'Broken Authentication & Session Management (Login Bypass)'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[marketplace.informatica.com] Search XSS'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[network.informatica.com] The login form XSS via the referer value'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'hurthearts'
b'Option method enabled'

21 May 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ilsani'
b'heap-use-after-free in mrb_vm_exec - vm.c:1247'

21 May 2017 timeline

b'Instacart' disclosed a bug submitted by b'bhavukjain1'
b'Login with Google Not Authenticated on iOS App'

21 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Dav sharing permissions issue'

20 May 2017 timeline

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pahan1234'
b'Full directory path listing'

20 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'xsszeeshan'
b'Clickjacking In https://demo.nextcloud.com'

20 May 2017 timeline

b'VK.com' disclosed a bug submitted by b'norver'
b'??????????? ?????? ?????? ????????????, ?? ????????????? ????????????? ??????????????, ????? ????????? ???? ?????????????? ?? ????? ?????.'

20 May 2017 timeline

1 ... 580 581 582 583 584 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.