The unofficial HackerOne disclosure Timeline

b'Weblate' disclosed a bug submitted by b'japzdivino'
b'Activation tokens are not expiring'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'ysx'
b'Open Redirect via "next" parameter in third-party authentication'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'japzdivino'
b'Insecure Account Removal'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'tushar21'
b'Login using disconnected google account i.e login using old email id'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'blacky'
b'Registration captcha bypass'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'phspade'
b'Content Spoofing'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'phspade'
b'[hosted.weblate.org]Account Takeover'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'rajauzairabdullah'
b'Open redirect in Signing in via Social Sites'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'd04k34d3v1l'
b'demo.weblate.org is vulnerable to SWEET32 Vulnerability'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'mrr3boot'
b'Improper Password Reset Policy on https://hosted.weblate.org/'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'ant_pyne'
b'No Password Length Restriction leads to Denial of Service'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'pavanw3b'
b'Email verification over an unencrypted channel'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'phspade'
b'No Rate Limitting at Change Password'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'kv_mishal'
b'full path disclosure at hosted.weblate.org/admin/accounts/profile/ '

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'jaysairam'
b'Improper access control when an added email address is deleted from authentication'

17 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'ansariosama'
b'Account Takeover using Third party Auth CSRF'

17 May 2017 timeline

b'ownCloud' disclosed a bug submitted by b'wester'
b'password reset email spamming'

17 May 2017 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'cybr0'
b'Misconfiguration: Missing Custom Error Page (CWE-12 & CWE-756)'

16 May 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'd04k34d3v1l'
b'content spoofing'

16 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'sinkmanu'
b'Reflected XSS in error pages (NC-SA-2017-008)'

15 May 2017 timeline

1 ... 587 588 589 590 591 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.