The unofficial HackerOne disclosure Timeline

b'Uber' disclosed a bug submitted by b'kushal89shah'
b"ability to retrieve a user's phone-number/email for a given inviteCode"

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'anonymans'
b'Already Registered Email Disclosure'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'codertom'
b'Content Spoofing in error message'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'streaak'
b'No expiration of session ID after Password change'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'khalidamin'
b'Missing DMARC on weblate.org'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'khalidamin'
b'Abuse of Api that causes spamming users and possible DOS due to missing rate limit on contact form'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'khalidamin'
b'Abuse of Api that causes spamming users and possible DOS due to missing rate limit'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eveez'
b'Content Spoofing'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eugui'
b'Specify maximal length in new comment'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eugui'
b'weblate.org: X-XSS-Protection not enabled'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eugui'
b'hosted.weblate.org: X-XSS-Protection not enabled'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'japzdivino'
b'Logout CSRF'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'ysx'
b'[demo.weblate.org] Stored Self-XSS via Editor Link in Profile'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eugui'
b'Specify maximal length in translation'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'eugui'
b'CSV Injection with the CVS export feature - Glossary'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'japzdivino'
b'Activation tokens are not expiring'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'ysx'
b'Open Redirect via "next" parameter in third-party authentication'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'japzdivino'
b'Insecure Account Removal'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'tushar21'
b'Login using disconnected google account i.e login using old email id'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'blacky'
b'Registration captcha bypass'

17 May 2017 timeline

1 ... 583 584 585 586 587 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.