The unofficial HackerOne disclosure Timeline

b'ownCloud' disclosed a bug submitted by b'mandeep'
b'owncloud.com: Outdated plugins contains public exploits '

11 Oct 2015 timeline

b'ownCloud' disclosed a bug submitted by b'paulos_'
b'Config'

11 Oct 2015 timeline

b'ownCloud' disclosed a bug submitted by b'suhas_gaikwad'
b'apps.owncloud.com: Mixed Active Scripting Issue '

11 Oct 2015 timeline

b'ownCloud' disclosed a bug submitted by b'avicoder'
b'Webview Vulnerablity [OwnCloudAndroid Application] '

11 Oct 2015 timeline

b'Sandbox Escape' disclosed a bug submitted by b'ashutoshmehra'
b'Internet Explorer Enhanced Protected Mode sandbox escape via a broker vulnerability'

09 Oct 2015 timeline

b'Sandbox Escape' disclosed a bug submitted by b'yopwn'
b'Microsoft Internet Explorer ActiveX Broker Allows EPM Bypass'

09 Oct 2015 timeline

b'ownCloud' disclosed a bug submitted by b'paresh_parmar'
b'demo.owncloud.org: HTTP compression is enabled potentially leading to BREACH attack'

09 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'reeth'
b'The POS Firmware is leaking the root Password which can be used for unauthorized access to the device.'

09 Oct 2015 timeline

b'Udemy' disclosed a bug submitted by b'adrianbelen'
b'XSS on https://www.udemy.com/asset/export.html'

08 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'pouya'
b'unauthorized access to all customers first and last name '

06 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'dhaval'
b'Open Redirect after login at http://ecommerce.shopify.com'

05 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'pouya'
b'customers password hash leak!!!!'

05 Oct 2015 timeline

b'Twitter' disclosed a bug submitted by b'wesecureapp'
b"Insecure Direct Object Reference - access to other user/group DM's"

03 Oct 2015 timeline

b'Shopify' disclosed a bug submitted by b'satishb3'
b'Shop admin can change external login services'

02 Oct 2015 timeline

b'Anghami' disclosed a bug submitted by b'aaj__'
b'[https://www.anghami.com/updatemailinfo/] Sql Injection'

02 Oct 2015 timeline

b'Anghami' disclosed a bug submitted by b'egyxos'
b'[CRITICAL] Login To Any Account Linked With Google+ With Email Only'

02 Oct 2015 timeline

b'Hired' disclosed a bug submitted by b'mohammedalsaggaf'
b'URGENT - Subdomain Takeover on be.hired.com. due to unclaimed domain pointing to Heroku.com'

01 Oct 2015 timeline

b'Phabricator' disclosed a bug submitted by b'superkritisch'
b"Multiple so called 'type juggling' attacks. Most notably PhabricatorUser::validateCSRFToken() is 'bypassable' in certain cases."

01 Oct 2015 timeline

b'Zaption' disclosed a bug submitted by b'psychomantis'
b'CSV Excel Macro Injection in Export Response'

01 Oct 2015 timeline

b'Hired' disclosed a bug submitted by b'yujitounai'
b'Stored XSS in Company Name'

30 Sep 2015 timeline

1 ... 705 706 707 708 709 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.