The unofficial HackerOne disclosure Timeline

b'VK.com' disclosed a bug submitted by b'all_universe'
b'??????? SSL-??????????? ??? ????? ?????? ? ?????? ?????????? ???????->?????? ? API ?????????????????? ?????????????.'

07 Jun 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'ahsankhan'
b'DOM XSS vulnerability in search dialogue (NC-SA-2017-007)'

07 Jun 2017 timeline

b'Automattic' disclosed a bug submitted by b'sainaen'
b"An Automattic employee's GitHub personal access token exposed in Travis CI build logs"

06 Jun 2017 timeline

b'Mixmax' disclosed a bug submitted by b'bengman'
b'CRLF Injection on https://vpn.mixmax.com'

06 Jun 2017 timeline

b'Cuvva' disclosed a bug submitted by b'amaljacob7531'
b'Session cookie without secure flag on https://underwriter.partner.cuvva.com'

06 Jun 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschke'
b'Stored XSS in Gallery application (NC-SA-2017-010)'

06 Jun 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschke'
b'Share tokens for public calendars disclosed (NC-SA-2017-011)'

06 Jun 2017 timeline

b'Mixmax' disclosed a bug submitted by b'sh3r1'
b'[compose.mixmax.com] Stored XSS on compose.mixmax.com in contact names.'

06 Jun 2017 timeline

b'concrete5' disclosed a bug submitted by b'cdl'
b'Password Reset link hijacking via Host Header Poisoning '

06 Jun 2017 timeline

b'General Motors' disclosed a bug submitted by b'mystech7'
b'Flash XSS on homepage fliptilescroller'

05 Jun 2017 timeline

b'General Motors' disclosed a bug submitted by b'mystech7'
b'Flash XSS on Buick_RotatingMasthead_JellyBeanSlider.swf'

05 Jun 2017 timeline

b'Perl (IBB)' disclosed a bug submitted by b'geeknik'
b'heap-buffer-overflow (READ of size 61) in Perl_re_intuit_start()'

05 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'akbar_kp'
b'Clickjacking docs.weblate.org'

05 Jun 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'giligails'
b'Missing Rate Limiting protection leading to mass triggering of e-mails'

05 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'punkit'
b'Weblate- Banner Grabbing-Ngnix Server version'

05 Jun 2017 timeline

b'YouPorn' disclosed a bug submitted by b'prakharprasad'
b'Find whether a video has been favourited or not, for any user [via YouPorn Mobile API]'

04 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'abiral'
b'Old password can be new password'

03 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'abiral'
b'Missing restriction on string size'

03 Jun 2017 timeline

b'Weblate' disclosed a bug submitted by b'inhibitor181'
b'CSRF - Changing the full name / adding a secondary email identity of an account via a GET request'

02 Jun 2017 timeline

b'Uber' disclosed a bug submitted by b'vijay_kumar'
b'phone number exposure for riders/drivers given email/uuid'

02 Jun 2017 timeline

1 ... 581 582 583 584 585 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.