The unofficial HackerOne disclosure Timeline

b'Harvest' disclosed a bug submitted by b'zuh4n'
b"Cookie Injection at 'harvestapp.com'"

24 Mar 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'haxormad'
b'Subdomain takeover in many subdomains'

24 Mar 2017 timeline

b'Airbnb' disclosed a bug submitted by b'dr-cdqh'
b'Nginx Version Disclosure'

23 Mar 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'bagipro'
b'Android - Possible to intercept broadcasts about uploaded files'

23 Mar 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'ryudox'
b'Server version/OS type disclosure via HTTP Response Header'

23 Mar 2017 timeline

b'Blockchain' disclosed a bug submitted by b'cloudyvirus'
b'HTTP Header Injection/HTTP_Response_Splitting'

23 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'valievkarim'
b'upgrade Aspen on inside.gratipay.com to pick up CR injection fix'

22 Mar 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschke'
b'Reflected XSS in U2F plugin by shipping the example endpoints'

22 Mar 2017 timeline

b'Xero' disclosed a bug submitted by b'4lemon'
b'stored xss issue in folder name on go.xero.com/Docs/Folders'

21 Mar 2017 timeline

b'Whisper' disclosed a bug submitted by b'1n3'
b'SMS Invite Form Abuse'

21 Mar 2017 timeline

b'Uber' disclosed a bug submitted by b'kazan71p'
b'SQL injection in 3rd party software Anomali'

21 Mar 2017 timeline

b'GitLab' disclosed a bug submitted by b'edio'
b'Gitlab.com is vulnerable to reverse tabnabbing.'

21 Mar 2017 timeline

b'Mapbox' disclosed a bug submitted by b'mishre'
b'Mapbox Android SDK uses Broadcast Receiver instead of Local Broadcast Manager'

21 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b'edio'
b'Content-Length restriction bypass to heap overflow in gip.rocks.'

20 Mar 2017 timeline

b'Uber' disclosed a bug submitted by b'solardiz'
b"pam-ussh may be tricked into using another logged in user's ssh-agent"

20 Mar 2017 timeline

b'Gratipay' disclosed a bug submitted by b's_p_q_r'
b'Avoid "resend verification email" confusion'

20 Mar 2017 timeline

b'ok.ru' disclosed a bug submitted by b'4lemon'
b'Stored XSS ? ????? ????? (2) ?? ????????? ?????.'

20 Mar 2017 timeline

b'ok.ru' disclosed a bug submitted by b'4lemon'
b'???????=>?????? ?????, ??????? ?? ????????????? ??? ???????'

20 Mar 2017 timeline

b'Trello' disclosed a bug submitted by b'rashedhasan007'
b'Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com'

20 Mar 2017 timeline

b'Trello' disclosed a bug submitted by b'rashedhasan007'
b'Email authentication token fails to expire and can be used multiple times for same Email address on Trello.com'

20 Mar 2017 timeline

1 ... 606 607 608 609 610 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.