The unofficial HackerOne disclosure Timeline

b'Dropbox' disclosed a bug submitted by b'daksh'
b'Privilege Escalation at invite feature @hackpad.com'

04 Apr 2015 timeline

b'Dropbox' disclosed a bug submitted by b'rohill'
b'Create N Accounts In Dropbox Irrespective Of Domain'

04 Apr 2015 timeline

wont-fix

b'Airbnb' disclosed a bug submitted by b'shamrocksu88'
b'Generating Unlimited Free Travel Gift Invites | IDOR'

04 Apr 2015 timeline

wont-fix

b'Coinbase' disclosed a bug submitted by b'homakov'
b"Sandboxed iframes don't show confirmation screen"

04 Apr 2015 timeline

b'Robocoin' disclosed a bug submitted by b'4lemon'
b'Error stack trace'

03 Apr 2015 timeline

b'Robocoin' disclosed a bug submitted by b'4lemon'
b'Stored XSS in api key of operator wallet'

03 Apr 2015 timeline

b'Robocoin' disclosed a bug submitted by b'4lemon'
b'stored xss in transaction'

03 Apr 2015 timeline

b'Vimeo' disclosed a bug submitted by b'adrianbelen'
b'abusing Thumbnails(https://vimeo.com/upload/select_thumb) to see a private video'

03 Apr 2015 timeline

b'Mobile Vikings' disclosed a bug submitted by b'4lemon'
b'CSRF token from another valid user session accepted'

03 Apr 2015 timeline

wont-fix

b'Mobile Vikings' disclosed a bug submitted by b'4lemon'
b'Enum phone numbers thru /en/sims/topup/add/'

03 Apr 2015 timeline

b'Slack' disclosed a bug submitted by b'satishb3'
b'Team admin can add billing contacts'

03 Apr 2015 timeline

b'Twitter' disclosed a bug submitted by b'seifelsallamy'
b'Open Redirect leak of authenticity_token lead to full account take over.'

03 Apr 2015 timeline

b'Twitter' disclosed a bug submitted by b'masatokinugawa'
b'XSS in twitter.com/safety/unsafe_link_warning'

03 Apr 2015 timeline

b'Vimeo' disclosed a bug submitted by b'jensk'
b'Can message users without the proper authorization'

01 Apr 2015 timeline

b'The Internet' disclosed a bug submitted by b'prosecco-inria'
b'FREAK: Factoring RSA_EXPORT Keys to Impersonate TLS Servers'

01 Apr 2015 timeline

b'Coinbase' disclosed a bug submitted by b'sasi2103'
b'Invoice Details activate JS that filled in '

30 Mar 2015 timeline

b'Sucuri' disclosed a bug submitted by b'jitendra'
b'Form contained inside page loaded over SSL submits its contents to another page over HTTP '

29 Mar 2015 timeline

wont-fix

b'Vimeo' disclosed a bug submitted by b'localpwn'
b'Bypassing Email verification '

29 Mar 2015 timeline

wont-fix

b'Square' disclosed a bug submitted by b'aaj'
b'Privilege Escalation'

28 Mar 2015 timeline

b'HackerOne' disclosed a bug submitted by b'mazengamal'
b'Team member invitations to sandboxed teams are not invalidated consistently'

28 Mar 2015 timeline

1 ... 721 722 723 724 725 ... 765

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.