The unofficial HackerOne disclosure Timeline

b'Informatica' disclosed a bug submitted by b'grampae'
b'[uk.informatica.com] XSS on uk.informatica..com'

28 Feb 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'titanous'
b'Heap buffer oveflow with many arguments'

28 Feb 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ssarong'
b'Segmentfault at mrb_vm_exec'

28 Feb 2017 timeline

b'Shopify' disclosed a bug submitted by b'avlidienbrunn'
b'Subdomain takeover on s3.shopify.com'

27 Feb 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'ssarong'
b'Heap Buffer overflow in mrb_funcall_with_block'

27 Feb 2017 timeline

b'Zomato' disclosed a bug submitted by b'cydefenser'
b'test.zba.se is vulnerable to SSL POODLE '

27 Feb 2017 timeline

b'Ruby' disclosed a bug submitted by b'dataalchemist'
b'Writable RubyCi Amazon s3 bucket'

27 Feb 2017 timeline

b'Ruby' disclosed a bug submitted by b'rootredrain'
b"Ruby:HTTP Header injection in 'net/http'"

27 Feb 2017 timeline

b'Twitter' disclosed a bug submitted by b'zigoo0'
b'Remote Unrestricted file Creation/Deletion and Possible RCE.'

26 Feb 2017 timeline

b'GlobaLeaks' disclosed a bug submitted by b'edio'
b'GlobaLeaks is vulnerable to timing attacks.'

26 Feb 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'putsi'
b'CSRF allows attacker to delete item from customer\'s "Postilaatikko"'

25 Feb 2017 timeline

b'HackerOne' disclosed a bug submitted by b'devil13'
b'Websites opened from reports can change url of report page '

25 Feb 2017 timeline

b'HackerOne' disclosed a bug submitted by b'1lastbr3ath'
b"Report redaction doesn't apply to report title update activities"

25 Feb 2017 timeline

b'Starbucks' disclosed a bug submitted by b'toctou'
b'Time-based Blind SQLi on news.starbucks.com'

24 Feb 2017 timeline

b'HackerOne' disclosed a bug submitted by b'zombiehelp54'
b"Disclose any user's private email through API"

24 Feb 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'dineshdinz'
b'Application code is not obfuscated -- OWASP M9 (2016)'

24 Feb 2017 timeline

b'Boozt Fashion AB' disclosed a bug submitted by b'implosion'
b'Bypass email validity in newsletter field'

24 Feb 2017 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b's_p_q_r'
b'[scores.ubnt.com] DOM based XSS at form.html'

24 Feb 2017 timeline

b'Dovecot' disclosed a bug submitted by b'socialfox'
b'Information About Your System(Sensitive Directories)'

24 Feb 2017 timeline

b'Pornhub' disclosed a bug submitted by b'r0bbyz'
b'vulnerabilitie'

23 Feb 2017 timeline

1 ... 607 608 609 610 611 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.