The unofficial HackerOne disclosure Timeline

b'WordPress' disclosed a bug submitted by b'codertom'
b'XSS in the search bar of mercantile.wordpress.org'

20 May 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'linkks'
b'XSS'

20 May 2017 timeline

b'Trello' disclosed a bug submitted by b'obi95'
b'XML entity expansion using svg file '

19 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'sarlis'
b'You can simply just use passwords that simply are as 123456'

19 May 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'simongurney'
b'Expired SSL certificate'

19 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'glc'
b'Amazon S3 bucket misconfiguration (share)'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'top'
b'CSS'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'benoculars'
b'Clickjacking login page of http://book.zomato.com/'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'roshanpty'
b'Unvalidated redirect on user profile website'

18 May 2017 timeline

b'Zomato' disclosed a bug submitted by b'dhanunjaya'
b'Visibility Robots.txt file'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te'
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'w4lter-wh1te'
b'Content spoofing due to the improper behavior of the 403 page'

18 May 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'cloudyvirus'
b'Email Spoofing Vulnerability from nextcloud.'

18 May 2017 timeline

b'Gratipay' disclosed a bug submitted by b'footstep'
b'nginx version disclosure on downloads.gratipay.com'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b"Null Password - Setting a new password doesn't check for empty spaces"

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Access to completion page without performing any action'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Setting a password with a single character'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'footstep'
b'Running 2 accounts with a single email'

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'secachhunew'
b'HttpOnly Flag not set '

18 May 2017 timeline

b'Weblate' disclosed a bug submitted by b'smit'
b'Missing restriction on string size of Full Name at https://demo.weblate.org/accounts/register/'

18 May 2017 timeline

1 ... 588 589 590 591 592 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.