The unofficial HackerOne disclosure Timeline

b'Uber' disclosed a bug submitted by b'gopinath6'
b'LIsting of http://archive.uber.com/pypi/simple/'

24 Mar 2016 timeline

b'Bookfresh' disclosed a bug submitted by b'adrianomarcmont'
b'Missing Function Level Access Control in /cindex.php/widget/customize/'

23 Mar 2016 timeline

b'LeaseWeb' disclosed a bug submitted by b'r4hul'
b'Found clickjacking vulnerability'

23 Mar 2016 timeline

b'Imgur' disclosed a bug submitted by b'jouko'
b'XSS via React element spoofing'

23 Mar 2016 timeline

b'Imgur' disclosed a bug submitted by b'1n3'
b'Server Side Request Forgery In Video to GIF Functionality'

22 Mar 2016 timeline

b'Veris' disclosed a bug submitted by b'sathish'
b'Complete Profile URL is not Random and not expiring '

22 Mar 2016 timeline

b'Vimeo' disclosed a bug submitted by b'saeedhashem'
b'Missing rate limit on private videos password'

22 Mar 2016 timeline

b'Gratipay' disclosed a bug submitted by b'deleted'
b'Possible SQL injection on "Jump to twitter"'

21 Mar 2016 timeline

b'Gratipay' disclosed a bug submitted by b'bugdisclose1'
b'Email Forgery through Mandrillapp SPF'

19 Mar 2016 timeline

b'Gratipay' disclosed a bug submitted by b'apple1337'
b'SPF/DKIM/DMARC for aspen.io'

19 Mar 2016 timeline

b'Twitter' disclosed a bug submitted by b'ericlaw'
b'Profile Pic padding (Length-hiding) fails due to use of GZIP'

18 Mar 2016 timeline

b'ok.ru' disclosed a bug submitted by b'ragnar'
b'????? ?????? ?? csrf-?? ? m.ok.ru'

18 Mar 2016 timeline

b'withinsecurity' disclosed a bug submitted by b'geekboy'
b'Error Page Text Injection #106350'

18 Mar 2016 timeline

b'Zomato' disclosed a bug submitted by b'arbaz_hussain'
b'CSRF AT SELECTING ZAMATO HANDLE'

18 Mar 2016 timeline

b'VK.com' disclosed a bug submitted by b'bo0om'
b'????????? ??????? ????????? ? ??????????? ??????? ????????????? YouTrack'

18 Mar 2016 timeline

b'Twitter' disclosed a bug submitted by b'bugdisclose'
b'Sub-Domain Takeover'

18 Mar 2016 timeline

b'Veris' disclosed a bug submitted by b'zuhan'
b'User enumeration via error message'

18 Mar 2016 timeline

b'Veris' disclosed a bug submitted by b'zuhan'
b'Insecure Direct Member Disclosure'

18 Mar 2016 timeline

b'Veris' disclosed a bug submitted by b'zuhan'
b"Insecure Direct 'org-invite-log' References"

18 Mar 2016 timeline

b'Veris' disclosed a bug submitted by b'zuhan'
b"Insecure Direct 'org-visitor-log' References"

18 Mar 2016 timeline

1 ... 686 687 688 689 690 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.