The unofficial HackerOne disclosure Timeline

b'Discourse' disclosed a bug submitted by b'knn'
b'XSS Vulnerability on Image link parser'

10 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'knn'
b'XSS vulnerability on Audio and Video parsers'

10 Jan 2017 timeline

b'VK.com' disclosed a bug submitted by b'n1__'
b'Stored XSS ? ?????? ??????????'

10 Jan 2017 timeline

b'Discourse' disclosed a bug submitted by b'muhammadkhizerjaved'
b'DOM Based XSS in Discourse Search'

10 Jan 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dawgyg'
b'XXE on DoD web server'

09 Jan 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'ak1t4'
b'Error Page Content Spoofing or Text Injection (viestinta.lahitapiola.fi)'

09 Jan 2017 timeline

b'Brave Software' disclosed a bug submitted by b'aaditya_purani'
b'[iOS/Android] Address Bar Spoofing Vulnerability '

08 Jan 2017 timeline

b'LocalTapiola' disclosed a bug submitted by b'anandakshya'
b'SQL Injection on viestinta.lahitapiola.fi'

07 Jan 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nahamsec'
b'Local File Inclusion vulnerability on an Army system allows downloading local files'

06 Jan 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sulemanmalik03'
b'Server side information disclosure'

06 Jan 2017 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'juliocesar'
b'Reflected XSS in a Navy website'

06 Jan 2017 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'hackerish'
b'Access to Grafana Dashboard'

06 Jan 2017 timeline

b'Coinbase' disclosed a bug submitted by b'bugdiscloseguys'
b'Authentication Issue'

05 Jan 2017 timeline

b'Coinbase' disclosed a bug submitted by b'ahmed_anwer_mohamed'
b'Content Injection error page'

05 Jan 2017 timeline

b'HackerOne' disclosed a bug submitted by b'deepankerchawla'
b'Information Disclosure in /skills call'

05 Jan 2017 timeline

b'shopify-scripts' disclosed a bug submitted by b'an0n-j'
b'Deleting Key-value pair from Frozen HASH or Clearing a Frozen HASH'

05 Jan 2017 timeline

b'Udemy' disclosed a bug submitted by b'csanuragjain'
b'Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token'

05 Jan 2017 timeline

b'Udemy' disclosed a bug submitted by b'gribdan'
b'AWS S3 bucket writable for authenticated aws user'

05 Jan 2017 timeline

b'Slack' disclosed a bug submitted by b'michiel'
b'Subdomain takeover on podcasts.slack-core.com'

04 Jan 2017 timeline

b'Snapchat' disclosed a bug submitted by b's_p_q_r'
b'[render.bitstrips.com] Stored XSS via an incorrect avatar property value'

04 Jan 2017 timeline

1 ... 621 622 623 624 625 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.