The unofficial HackerOne disclosure Timeline

b'Whisper' disclosed a bug submitted by b'4lemon'
b'Error stack trace'

29 Mar 2017 timeline

b'Whisper' disclosed a bug submitted by b'4lemon'
b'Directory index and information disclosure'

29 Mar 2017 timeline

b'Instacart' disclosed a bug submitted by b'codertom'
b'READ .svg files by changing .svg into .png extension'

29 Mar 2017 timeline

b'Ruby' disclosed a bug submitted by b'koti2'
b'public report - Reproducible - Writable RubyCi Amazon s3 bucket[207053]'

29 Mar 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'korprit'
b'Weak credentials for nutty.ubnt.com'

29 Mar 2017 timeline

b'Lyst' disclosed a bug submitted by b'mr_edwards'
b'Site configured improperly at subdomain of lyst.co.uk'

29 Mar 2017 timeline

b'HackerOne' disclosed a bug submitted by b'ziot'
b'IE 11 Self-XSS on Jira Integration Preview Base Link'

29 Mar 2017 timeline

b'Zomato' disclosed a bug submitted by b'bhavukjain1'
b"Unauthorised Access to Anyone's User Account"

28 Mar 2017 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'CSRF in all API endpoints when authenticated using HTTP Authentication'

28 Mar 2017 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'Stored XSS in [shop].myshopify.com/admin/orders/[id]'

28 Mar 2017 timeline

b'Shopify' disclosed a bug submitted by b'skavans'
b'Stored passive XSS at scheduled posts (kitcrm.com)'

28 Mar 2017 timeline

b'Shopify' disclosed a bug submitted by b'jamesclyde'
b'Full access at an internal service of Shopify'

28 Mar 2017 timeline

b'YouPorn' disclosed a bug submitted by b'myst404'
b'Reflected XSS in Meta Tag'

28 Mar 2017 timeline

b'Pornhub' disclosed a bug submitted by b'cyber-guard'
b'IDOR - disclosure of private videos - /api_android_v3/getUserVideos'

27 Mar 2017 timeline

b'QIWI' disclosed a bug submitted by b'bobrov'
b'[ibank.qiwi.ru] UI Redressing via Request-URI'

27 Mar 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'paresh_parmar'
b'Potential SSRF in sales.mail.ru'

27 Mar 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'bigbear_'
b'[gitmm.corp.mail.ru] Auth Bypass, Information Disclosure'

27 Mar 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'bigbear_'
b'[allods.mail.ru] Reflected XSS'

27 Mar 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'bigbear_'
b'[w1.dwar.ru] Core Dump'

27 Mar 2017 timeline

b'Mail.Ru' disclosed a bug submitted by b'bigbear_'
b'[otus.p.mail.ru] Full Path Disclosure'

27 Mar 2017 timeline

1 ... 601 602 603 604 605 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.