The unofficial HackerOne disclosure Timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Users with guest access can post notes to private merge requests, issues, and snippets'

23 Jan 2017 timeline

b'Informatica' disclosed a bug submitted by b'e3xpl0it'
b'[afocusp.informatica.com] Sql injection afocusp.informatica.com:37777'

21 Jan 2017 timeline

b'Informatica' disclosed a bug submitted by b'e3xpl0it'
b'[ipm.informatica.com] Sql injection Oracle '

21 Jan 2017 timeline

b'Slack' disclosed a bug submitted by b'yassineaboukir'
b'[Screenhero] Subdomain takeover'

21 Jan 2017 timeline

b'Maximum' disclosed a bug submitted by b'akhmm'
b'Facebook and twitter page claimed of maximum.com [important]'

21 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'swapnil755'
b'Email spoofing possible via Legal Robot domain'

21 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'Stored XSS in topics because of whitelisted_generic engine vulnerability'

20 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'XSS in topics because of bandcamp preview engine vulnerability'

20 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'skavans'
b'Stored XSS in posts because of absence of oembed variables values escaping'

20 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'mostafamamdoh2015'
b'Validation bypass on user profile'

20 Jan 2017 timeline

b'OLX' disclosed a bug submitted by b'yappare'
b'XSS on Meta Tag at https://m.olx.ph'

20 Jan 2017 timeline

b'Brave Software' disclosed a bug submitted by b'i1iii11iiiii111iii1'
b'No user confirmation when an auto-updated extension gets more permissions'

20 Jan 2017 timeline

b'Legal Robot' disclosed a bug submitted by b'arnonymous'
b'Missing restriction on string size in profile fields'

20 Jan 2017 timeline

b'Badoo' disclosed a bug submitted by b'alvares97'
b'Leave inaccessible messaging system with a message (https://us1.badoo.com)'

19 Jan 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'whitehattushu'
b'Disclosure of IBM Websphere page'

19 Jan 2017 timeline

b'Urban Dictionary' disclosed a bug submitted by b'ak1t4'
b'Text injection on Auth problem at urbandictionary.com'

17 Jan 2017 timeline

b'Starbucks' disclosed a bug submitted by b'muhammadkhizerjaved'
b'http://digital.starbucks.com/ Creation of Google G Suite Account on Behalf of starbucks. '

17 Jan 2017 timeline

b'Starbucks' disclosed a bug submitted by b'ddworken'
b'Persistent XSS in www.starbucks.com'

17 Jan 2017 timeline

b'Starbucks' disclosed a bug submitted by b'yappare'
b'Improper Validation on Cancel Link Redirect'

17 Jan 2017 timeline

b'Instacart' disclosed a bug submitted by b'footstep'
b'Authentication Bypass in Updating Personal Information'

17 Jan 2017 timeline

1 ... 617 618 619 620 621 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.