The unofficial HackerOne disclosure Timeline

b'Alvosec' disclosed a bug submitted by b'edio'
b'Alvocrypt uses a cryptographically insecure PRNG.'

23 Feb 2017 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Group admin can remove user from all his groups via API'

23 Feb 2017 timeline

b'Zendesk' disclosed a bug submitted by b'abhijeth'
b'Missing function level access controls allowing attacker to abuse file access controls. Multiple vulnerabilities'

23 Feb 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'modam3rly'
b"show control page if you insert ' at http://viestinta.lahitapiola.fi/"

22 Feb 2017 timeline

b'GoCD' disclosed a bug submitted by b'creased'
b'Reflected XSS vector'

22 Feb 2017 timeline

b'Khan Academy' disclosed a bug submitted by b'hack40077'
b' SSL/TLS Vulnerability at khanacademy.org'

22 Feb 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'putsi'
b'Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage'

22 Feb 2017 timeline

b'Lyst' disclosed a bug submitted by b'mrr3boot'
b'Mixed Active content issue on https://www.lyst.com'

22 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b'zuh4n'
b'Html injection in monitor name textbox'

22 Feb 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'joukahainen'
b'/icons/README available on viestinta.lahitapiola.fi'

22 Feb 2017 timeline

b'Khan Academy' disclosed a bug submitted by b'mohith_kalyan'
b'No Security check at changing password and at adding mobile number which leads to account takeover and spam'

21 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b's_p_q_r'
b'[alerts.newrelic.com] Scanning local network via notification channel'

21 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b's_p_q_r'
b'[download.newrelic.com] Access to private directories'

21 Feb 2017 timeline

b'Pornhub' disclosed a bug submitted by b'shepard'
b'Stored XSS on the http://ht.pornhub.com/widgets/'

20 Feb 2017 timeline

b'Dovecot' disclosed a bug submitted by b'hack40077'
b'SSL Certification Expired And TLS Vulnerability '

20 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b'arneswinnen'
b'Mobile Authentication Endpoint Credentials Brute-Force Vulnerability'

19 Feb 2017 timeline

b'Envoy' disclosed a bug submitted by b'rashedhasan007'
b'Primary Cloning of Envoy web application resulting confidential information disclosure'

19 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b'psy_demon'
b'Privilege Escalation In Moniter'

19 Feb 2017 timeline

b'New Relic' disclosed a bug submitted by b'psy_demon'
b'Improper Session Management'

19 Feb 2017 timeline

b'Informatica' disclosed a bug submitted by b'mohammad-obaid'
b'Subdomain missconfiguration'

19 Feb 2017 timeline

1 ... 608 609 610 611 612 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.