The unofficial HackerOne disclosure Timeline

b'Zendesk' disclosed a bug submitted by b'zombiehelp54'
b'Stored XSS in comments'

13 Nov 2015 timeline

b'Mail.Ru' disclosed a bug submitted by b'bigbear_'
b'[ling.go.mail.ru] Server-Status opened for all users'

13 Nov 2015 timeline

b'Binary.com' disclosed a bug submitted by b'paulos_'
b'Cross Site Scripting'

13 Nov 2015 timeline

b'ownCloud' disclosed a bug submitted by b'mohammedalsaggaf'
b'owncloud.com: Content Sniffing not disabled'

12 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'elamaran619'
b'Privilege escalation and circumvention of permission to limited access user'

11 Nov 2015 timeline

b'Slack' disclosed a bug submitted by b'hassham'
b'File upload XSS (Java applet) on http://slackatwork.com/'

11 Nov 2015 timeline

b'Slack' disclosed a bug submitted by b'harry_mg'
b'Self-XSS in posts by formatting text as code'

10 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'shahmeer-amir'
b'Accessing Payments page and adding payment methods with limited access accounts'

10 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'shahmeer-amir'
b'Missing authorization check on dashboard overviews'

10 Nov 2015 timeline

b'Slack' disclosed a bug submitted by b'harry_mg'
b'Stored XSS in Slack (weird, trial and error)'

10 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'brakhane'
b"A 'Full access' administrator is able to see the shop owners user details"

10 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'rms'
b'List of devices is accessible regardless of the account limitations'

10 Nov 2015 timeline

b'Slack' disclosed a bug submitted by b'harry_mg'
b'Reflected Self-XSS in Slack'

10 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'brakhane'
b"'Limited' RCE in certain places where Liquid is accepted"

10 Nov 2015 timeline

b'Udemy' disclosed a bug submitted by b'robd4k'
b'XSS Vulnerability'

09 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'hazimaslam'
b'First & Last Name Disclosure of any Shopify Store Admin'

09 Nov 2015 timeline

b'ownCloud' disclosed a bug submitted by b'tomdev'
b'RCE in ci.owncloud.com / ci.owncloud.org'

09 Nov 2015 timeline

b'Python' disclosed a bug submitted by b'johnleitch'
b'PyFloat_FromString & PyNumber_Long Buffer Over-reads'

08 Nov 2015 timeline

b'Shopify' disclosed a bug submitted by b'hazimaslam'
b"Unauthorized access to any Store Admin's First & Last name"

07 Nov 2015 timeline

b'InVision' disclosed a bug submitted by b'mrrel'
b'Multiple Upload Vulnerability !File Upload + File Inclusion (Access Not Forbidden)'

06 Nov 2015 timeline

1 ... 701 702 703 704 705 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.