The unofficial HackerOne disclosure Timeline

b'Udemy' disclosed a bug submitted by b'adrianbelen'
b'XSS on https://www.udemy.com/asset/export.html'

08 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'pouya'
b'unauthorized access to all customers first and last name '

06 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'dhaval'
b'Open Redirect after login at http://ecommerce.shopify.com'

05 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'pouya'
b'customers password hash leak!!!!'

05 Oct 2015 timeline

b'Twitter' disclosed a bug submitted by b'wesecureapp'
b"Insecure Direct Object Reference - access to other user/group DM's"

03 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'satishb3'
b'Shop admin can change external login services'

02 Oct 2015 timeline

b'Anghami' disclosed a bug submitted by b'aaj__'
b'[https://www.anghami.com/updatemailinfo/] Sql Injection'

02 Oct 2015 timeline

b'Anghami' disclosed a bug submitted by b'egyxos'
b'[CRITICAL] Login To Any Account Linked With Google+ With Email Only'

02 Oct 2015 timeline

b'Hired' disclosed a bug submitted by b'mohammedalsaggaf'
b'URGENT - Subdomain Takeover on be.hired.com. due to unclaimed domain pointing to Heroku.com'

01 Oct 2015 timeline

b'Phabricator' disclosed a bug submitted by b'superkritisch'
b"Multiple so called 'type juggling' attacks. Most notably PhabricatorUser::validateCSRFToken() is 'bypassable' in certain cases."

01 Oct 2015 timeline

b'Zaption' disclosed a bug submitted by b'psychomantis'
b'CSV Excel Macro Injection in Export Response'

01 Oct 2015 timeline

b'Hired' disclosed a bug submitted by b'yujitounai'
b'Stored XSS in Company Name'

30 Sep 2015 timeline

b'Shopify' disclosed a bug submitted by b'acid_creative'
b'Passwords Returned in Later Responses.'

30 Sep 2015 timeline

b'Shopify' disclosed a bug submitted by b'prakharprasad'
b'Prevent Shop Admin From Seeing his Installed Apps / Install Persistent Unremovable App'

29 Sep 2015 timeline

b'PHP' disclosed a bug submitted by b'libnex'
b'Null pointer dereference in phar_get_fp_offset()'

29 Sep 2015 timeline

b'PHP' disclosed a bug submitted by b'haquaman'
b'Uninitialized pointer in phar_make_dirstream'

29 Sep 2015 timeline

b'Vimeo' disclosed a bug submitted by b'vijay_kumar1110'
b'Share your channel to any user on vimeo without following him'

28 Sep 2015 timeline

b'ownCloud' disclosed a bug submitted by b'bigbear_'
b'[s3.owncloud.com] Web Server HTTP Trace/Track Method Support '

28 Sep 2015 timeline

b'ownCloud' disclosed a bug submitted by b'ashish_padelkar'
b'No email verification during registration'

28 Sep 2015 timeline

b'QIWI' disclosed a bug submitted by b'pradeepch99'
b'Session Cookie without HttpOnly and secure flag set'

27 Sep 2015 timeline

1 ... 704 705 706 707 708 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.