The unofficial HackerOne disclosure Timeline

b'shopify-scripts' disclosed a bug submitted by b'lucnguyen'
b'Interger overflow in str_substr leading to read/write out of bound memory'

15 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'dkasak'
b'Certain inputs cause tight C-level recursion leading to process stack overflow'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'aerodudrizzt'
b'sprintf gem - format string combined attack'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'aerodudrizzt'
b'Controlled address leak due to type confusion - ASLR bypass'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'dgaletic'
b'Null pointer dereference in mark_context_stack'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'dgaletic'
b'Null pointer dereference in mrb_class'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'dgaletic'
b'Segmentation fault while printing backtrace'

14 Mar 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'titanous'
b'Heap buffer overflow with long array assignment'

14 Mar 2017 timeline

b'Trello' disclosed a bug submitted by b'theflofly'
b'Stealing power up private tokens (trello, twitter, github...)'

14 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze'
b'HTML Injection in email from http://www.lahitapiola.fi/henkilo/sivut/tonttutesti'

13 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'delimitry'
b'/icons/README is still available on viestinta.lahitapiola.fi'

12 Mar 2017 timeline

b'Algolia' disclosed a bug submitted by b'explicitbug'
b'No rate limit for Referral Program'

12 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards'
b'Single user DOS on selectedLanguage -cookie (yrityspalvelu.lahitapiola.fi)'

11 Mar 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'nahamsec'
b"CSRF in 'set.php' via age causes stored XSS on 'get.php' - http://www.rockstargames.com/php/videoplayer_cache/get.php'"

10 Mar 2017 timeline

b'QIWI' disclosed a bug submitted by b'pengenkiddy'
b'????????? ??????? ?? //kopilka.qiwi.com'

10 Mar 2017 timeline

b'QIWI' disclosed a bug submitted by b'pengenkiddy'
b'[XSS/3dsecure.qiwi.com] 3DSecure XSS'

10 Mar 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'nordin'
b'Bypassing quota limit '

10 Mar 2017 timeline

b'WebSummit' disclosed a bug submitted by b'sagarrajani'
b'found a vulnerability in your website'

10 Mar 2017 timeline

b'drchrono' disclosed a bug submitted by b'banned'
b'Create and Update patients vulnerability'

10 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'tbmnull'
b'CSRF bypass + XSS on verkkopalvelu.tapiola.fi'

10 Mar 2017 timeline

1 ... 603 604 605 606 607 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.