The unofficial HackerOne disclosure Timeline

b'Nginx' disclosed a bug submitted by b'lmolas'
b'SPDY heap buffer overflow'

24 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'XSS Yahoo Messenger Via Calendar.Yahoo.Com '

23 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'Yahoo YQL Injection? '

22 Mar 2014 timeline

wont-fix

b'OkCupid' disclosed a bug submitted by b'fin1te'
b'Instagram Authentication - No Request Token'

21 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'HTML Code Injection '

17 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'HK.Yahoo.Net Remote Command Execution'

17 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'SQL Injection ON HK.Promotion'

17 Mar 2014 timeline

b'Secret' disclosed a bug submitted by b'anshuman_bh'
b'SSL Not Enforced'

16 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'jigar39'
b'Vulnerability found, XSS (Cross site Scripting)'

15 Mar 2014 timeline

wont-fix

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'Directory Traversal '

13 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'pbssubhash'
b'ClickJacking on http://au.launch.yahoo.com'

13 Mar 2014 timeline

wont-fix

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'Java Applet Execution On Y! Messenger'

12 Mar 2014 timeline

wont-fix

b'Yahoo!' disclosed a bug submitted by b'nahamsec'
b'Information Disclosure '

12 Mar 2014 timeline

wont-fix

b'HackerOne' disclosed a bug submitted by b'fin1te'
b'Control Characters Not Stripped From Username on Signup'

11 Mar 2014 timeline

b'Flash' disclosed a bug submitted by b'masatokinugawa'
b'Same Origin Security Bypass Vulnerability'

11 Mar 2014 timeline

b'Yahoo!' disclosed a bug submitted by b'smiegles'
b'Cross-site scripting on the main page of flickr by tagging a user.'

07 Mar 2014 timeline

b'The Internet' disclosed a bug submitted by b'prosecco-inria'
b'TLS Triple Handshake Attack'

03 Mar 2014 timeline

b'HackerOne' disclosed a bug submitted by b'guido'
b'CSS leaks SCSS debug info'

28 Feb 2014 timeline

b'Phabricator' disclosed a bug submitted by b'dawidczagan'
b'Improperly implemented password recovery link functionality'

27 Feb 2014 timeline

b'Flash' disclosed a bug submitted by b'clem1'
b'Flash double free vulnerability leads to code execution'

27 Feb 2014 timeline

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.