The unofficial HackerOne disclosure Timeline

b'HackerOne' disclosed a bug submitted by b'japzdivino'
b'Report invitation links not restricted to any existing user'

23 May 2017 timeline

b'HackerOne' disclosed a bug submitted by b'whhackersbr'
b"Changing Victim's JIRA Integration Settings Through Multiple Bugs"

23 May 2017 timeline

b'Quora' disclosed a bug submitted by b'panther'
b'self xss in'

22 May 2017 timeline

b'Twitter' disclosed a bug submitted by b'kedrisch'
b'[URGENT] Opportunity to publish tweets on any twitters account'

22 May 2017 timeline

b'Trello' disclosed a bug submitted by b'obi95'
b'api flaw'

22 May 2017 timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'XSS in $shop$.myshopify.com/admin/ via "Button Objects" in malicious app'

22 May 2017 timeline

b'Cuvva' disclosed a bug submitted by b'd04k34d3v1l'
b'cuvva.com vulnerable to sweet32'

22 May 2017 timeline

b'Maximum' disclosed a bug submitted by b'kieran'
b'IDOR in editing courses'

22 May 2017 timeline

b'Starbucks' disclosed a bug submitted by b'joaomatosf'
b'Java Deserialization RCE via JBoss on card.starbucks.in'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'smit'
b'Missing filteration of meta characters in full name field on registration page https://demo.weblate.org/accounts/register'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'abdelfattah_tcp'
b'ClickJacking'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'ph_spade'
b'Direct IP Access'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b"invalid URL parsing with and '@'"

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on http://blog.owox.com/'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on OWOX.RU'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'k_jagdish'
b'Broken Authentication & Session Management (Login Bypass)'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[marketplace.informatica.com] Search XSS'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[network.informatica.com] The login form XSS via the referer value'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'hurthearts'
b'Option method enabled'

21 May 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ilsani'
b'heap-use-after-free in mrb_vm_exec - vm.c:1247'

21 May 2017 timeline

1 ... 583 584 585 586 587 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.