The unofficial HackerOne disclosure Timeline

b'LocalTapiola' disclosed a bug submitted by b's4y0b'
b'SQL Injection in lapsuudenturva (viestinta.lahitapiola.fi)'

25 Jan 2017 timeline

b'Twitter' disclosed a bug submitted by b'akhil-reni'
b'leaking Digits OAuth authorization to third party websites'

24 Jan 2017 timeline

b'Badoo' disclosed a bug submitted by b'abiral'
b'Email Spoofing'

24 Jan 2017 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Users can download old project exports due to unclaimed namespace'

23 Jan 2017 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Every user can delete public deploy keys'

23 Jan 2017 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'User with guest access can access private merge requests'

23 Jan 2017 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Users with guest access can post notes to private merge requests, issues, and snippets'

23 Jan 2017 timeline

b'Informatica' disclosed a bug submitted by b'e3xpl0it'
b'[afocusp.informatica.com] Sql injection afocusp.informatica.com:37777'

21 Jan 2017 timeline

b'Informatica' disclosed a bug submitted by b'e3xpl0it'
b'[ipm.informatica.com] Sql injection Oracle '

21 Jan 2017 timeline

b'Slack' disclosed a bug submitted by b'yassineaboukir'
b'[Screenhero] Subdomain takeover'

21 Jan 2017 timeline

b'Maximum' disclosed a bug submitted by b'akhmm'
b'Facebook and twitter page claimed of maximum.com [important]'

21 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'swapnil755'
b'Email spoofing possible via Legal Robot domain'

21 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'Stored XSS in topics because of whitelisted_generic engine vulnerability'

20 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'XSS in topics because of bandcamp preview engine vulnerability'

20 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'Stored XSS in posts because of absence of oembed variables values escaping'

20 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'mostafamamdoh2015'
b'Validation bypass on user profile'

20 Jan 2017 timeline

b'OLX' disclosed a bug submitted by b'yappare'
b'XSS on Meta Tag at https://m.olx.ph'

20 Jan 2017 timeline

b'Brave Software' disclosed a bug submitted by b'i1iii11iiiii111iii1'
b'No user confirmation when an auto-updated extension gets more permissions'

20 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'arnonymous'
b'Missing restriction on string size in profile fields'

20 Jan 2017 timeline

b'Badoo' disclosed a bug submitted by b'alvares97'
b'Leave inaccessible messaging system with a message (https://us1.badoo.com)'

19 Jan 2017 timeline

1 ... 613 614 615 616 617 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.