The unofficial HackerOne disclosure Timeline

b'Starbucks' disclosed a bug submitted by b'joaomatosf'
b'Java Deserialization RCE via JBoss on card.starbucks.in'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'smit'
b'Missing filteration of meta characters in full name field on registration page https://demo.weblate.org/accounts/register'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'abdelfattah_tcp'
b'ClickJacking'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'ph_spade'
b'Direct IP Access'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b"invalid URL parsing with and '@'"

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on http://blog.owox.com/'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'yynl'
b'Subdomain Takeover on OWOX.RU'

22 May 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'k_jagdish'
b'Broken Authentication & Session Management (Login Bypass)'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[marketplace.informatica.com] Search XSS'

22 May 2017 timeline

b'Informatica' disclosed a bug submitted by b's_p_q_r'
b'[network.informatica.com] The login form XSS via the referer value'

22 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'hurthearts'
b'Option method enabled'

21 May 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ilsani'
b'heap-use-after-free in mrb_vm_exec - vm.c:1247'

21 May 2017 timeline

b'Instacart' disclosed a bug submitted by b'bhavukjain1'
b'Login with Google Not Authenticated on iOS App'

21 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Dav sharing permissions issue'

20 May 2017 timeline

b'Paragon Initiative Enterprises' disclosed a bug submitted by b'pahan1234'
b'Full directory path listing'

20 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'xsszeeshan'
b'Clickjacking In https://demo.nextcloud.com'

20 May 2017 timeline

b'VK.com' disclosed a bug submitted by b'norver'
b'??????????? ?????? ?????? ????????????, ?? ????????????? ????????????? ??????????????, ????? ????????? ???? ?????????????? ?? ????? ?????.'

20 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'sumitsahoo'
b'Missing Rate Limit for Current Password field in nextcloud.com'

20 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'etd'
b'Privilege escalation - Normal user can somehow make admin to delete shared folders'

20 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'streaak'
b'Open SMTP port can let anyone send email from mail.chihar.com'

20 May 2017 timeline

1 ... 587 588 589 590 591 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.