The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'sumitsahoo'
b'Missing Rate Limit for Current Password field in nextcloud.com'

20 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'etd'
b'Privilege escalation - Normal user can somehow make admin to delete shared folders'

20 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'streaak'
b'Open SMTP port can let anyone send email from mail.chihar.com'

20 May 2017 timeline

b'WordPress' disclosed a bug submitted by b'codertom'
b'XSS in the search bar of mercantile.wordpress.org'

20 May 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'linkks'
b'XSS'

20 May 2017 timeline

b'Trello' disclosed a bug submitted by b'obi95'
b'XML entity expansion using svg file '

19 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'sarlis'
b'You can simply just use passwords that simply are as 123456'

19 May 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'simongurney'
b'Expired SSL certificate'

19 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'glc'
b'Amazon S3 bucket misconfiguration (share)'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'top'
b'CSS'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'benoculars'
b'Clickjacking login page of http://book.zomato.com/'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'roshanpty'
b'Unvalidated redirect on user profile website'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'dhanunjaya'
b'Visibility Robots.txt file'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te'
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te'
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'cloudyvirus'
b'Email Spoofing Vulnerability from nextcloud.'

18 May 2017 timeline

b'Gratipay' disclosed a bug submitted by b'footstep'
b'nginx version disclosure on downloads.gratipay.com'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b"Null Password - Setting a new password doesn't check for empty spaces"

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Access to completion page without performing any action'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Setting a password with a single character'

18 May 2017 timeline

1 ... 581 582 583 584 585 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.