The unofficial HackerOne disclosure Timeline

b'New Relic' disclosed a bug submitted by b'waqar_vicky'
b'A Signup page does not properly validate the authenticity token at the server side.'

20 Mar 2017 timeline

b'New Relic' disclosed a bug submitted by b'waqar_vicky'
b'A Log in page does not properly validate the authenticity token at the server side'

20 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards'
b'Brute force unsubscription on /webApp/unsub_sb (viestinta.lahitapiola.fi)'

19 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze'
b'XSS on 3rd party service Localtapiola is using'

18 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'ahsantahir'
b'Reflected XSS and Open Redirect (verkkopalvelu.lahitapiola.fi)'

18 Mar 2017 timeline

b'Bime' disclosed a bug submitted by b'4lemon'
b'SSRF issue'

18 Mar 2017 timeline

b'Zendesk' disclosed a bug submitted by b'boniao_norwin'
b'a stored xss in web widget chat'

18 Mar 2017 timeline

b'Zendesk' disclosed a bug submitted by b'4lemon'
b'Error stack trace enabled'

18 Mar 2017 timeline

b'Zopim' disclosed a bug submitted by b'prbln'
b'express config leaking stacktrace'

18 Mar 2017 timeline

b'Zopim' disclosed a bug submitted by b'bagipro'
b'Android SDK - CREATE_REQUEST broascast is unprotected'

18 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'bobrov'
b'Creating arbitrary cookies values /cs/CookieServer (www.lahitapiola.fi)'

18 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'irotem'
b'High server resource usage on captcha (viestinta.lahitapiola.fi)'

18 Mar 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'rnmx'
b'SMTP configuration vulnerability viestinta.lahitapiola.fi'

18 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'jaypatel'
b'Limit email address length'

18 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'dr-cdqh'
b'Incomplete or No Cache-control and Pragma HTTP Header Set'

17 Mar 2017 timeline

b'Rockstar Games' disclosed a bug submitted by b'anshuman_bh'
b'[IMP] - Blind XSS in the admin panel for reviewing comments'

17 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'hharry'
b'Send email asynchronously'

17 Mar 2017 timeline

b'Alvosec' disclosed a bug submitted by b'zephrfish'
b'[ns2.????] Vulnerable to DNS Zone Transfer'

17 Mar 2017 timeline

b'FormAssembly' disclosed a bug submitted by b'edio'
b'formassembly.com is vulnerable to padding-oracle attacks.'

17 Mar 2017 timeline

b'Moneybird' disclosed a bug submitted by b'yaworsk'
b'Stored Cross Site Scripting in Customer Name'

17 Mar 2017 timeline

1 ... 604 605 606 607 608 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.