The unofficial HackerOne disclosure Timeline

b'GitLab' disclosed a bug submitted by b'ysx'
b'[Subgroups] Unprivileged User Can Disclose Private Group Names'

30 Mar 2017 timeline

b'Udemy' disclosed a bug submitted by b'ak_1337'
b'Subdomain Takeover at Landing.udemy.com '

30 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ston3'
b'SIGSEGV - vm.c - line:1214'

29 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ston3'
b'SIGABRT - method_missing - mark_context_stack'

29 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'gninrepoli'
b'forgot to add the patch'

29 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ston3'
b'SIGABRT - mrb_realloc_simple - gc.c - line:201'

29 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ston3'
b'SIGSEGV - mrb_vm_exec - line:1312'

29 Mar 2017 timeline

b'Ruby' disclosed a bug submitted by b'injector404'
b'Open S3 Bucket WriteAble To Any Aws User'

29 Mar 2017 timeline

b'VK.com' disclosed a bug submitted by b'ryaz23'
b'??????????? ???????? ????? ???????????? ?????? ???????????? ?????????'

29 Mar 2017 timeline

b'Pushwoosh' disclosed a bug submitted by b'sp1d3rs'
b'Publicy accessible IDRAC instance at api-m.inapp.pushwoosh.com'

29 Mar 2017 timeline

b'itBit Exchange' disclosed a bug submitted by b'4lemon'
b'Stored xss in bank name withdraw'

29 Mar 2017 timeline

b'Whisper' disclosed a bug submitted by b'4lemon'
b'Error stack trace'

29 Mar 2017 timeline

b'Whisper' disclosed a bug submitted by b'4lemon'
b'Directory index and information disclosure'

29 Mar 2017 timeline

b'Instacart' disclosed a bug submitted by b'codertom'
b'READ .svg files by changing .svg into .png extension'

29 Mar 2017 timeline

b'Ruby' disclosed a bug submitted by b'koti2'
b'public report - Reproducible - Writable RubyCi Amazon s3 bucket[207053]'

29 Mar 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'korprit'
b'Weak credentials for nutty.ubnt.com'

29 Mar 2017 timeline

b'Lyst' disclosed a bug submitted by b'mr_edwards'
b'Site configured improperly at subdomain of lyst.co.uk'

29 Mar 2017 timeline

b'HackerOne' disclosed a bug submitted by b'ziot'
b'IE 11 Self-XSS on Jira Integration Preview Base Link'

29 Mar 2017 timeline

b'Zomato' disclosed a bug submitted by b'bhavukjain1'
b"Unauthorised Access to Anyone's User Account"

28 Mar 2017 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'CSRF in all API endpoints when authenticated using HTTP Authentication'

28 Mar 2017 timeline

1 ... 597 598 599 600 601 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.