The unofficial HackerOne disclosure Timeline

Lob disclosed a bug submitted by common
No Access Control

12 Aug 2019 timeline

Brave Software disclosed a bug submitted by padpao
Link obfuscation bug

12 Aug 2019 timeline

Nextcloud disclosed a bug submitted by leonklingele
Group admins can remove arbitrary data from "data" directory (including admin data)

12 Aug 2019 timeline

Tron Foundation disclosed a bug submitted by hayageek
Private Key exposed in Travis Log can Compromise all the test servers.

11 Aug 2019 timeline

Twitter disclosed a bug submitted by orange
Potential pre-auth RCE on Twitter VPN

10 Aug 2019 timeline

TomTom disclosed a bug submitted by zer0ttl
Listing of Amazon S3 Bucket accessible to any amazon authenticated user (vector-maps-e457472599)

09 Aug 2019 timeline

Maximum disclosed a bug submitted by dawidczagan
XSS risk reduction with X-XSS-Protection: 1; mode=block header

09 Aug 2019 timeline

Dropbox disclosed a bug submitted by davidrenardy
Algorithmic complexity vulnerability in ZXCVBN leads to remote denial of service attack

08 Aug 2019 timeline

Mail.ru disclosed a bug submitted by mygf
CSRF Vulnerability at https://aw.my.com/

08 Aug 2019 timeline

HackerOne disclosed a bug submitted by the_arch_angel
Program Email Nofication settings ignored when being added as an external contributor

07 Aug 2019 timeline

PayPal disclosed a bug submitted by albinowax
Bypass for #488147 enables stored XSS on https://paypal.com/signin again

07 Aug 2019 timeline

PayPal disclosed a bug submitted by albinowax
Stored XSS on https://paypal.com/signin via cache poisoning

07 Aug 2019 timeline

TTS Bug Bounty disclosed a bug submitted by rioncool22
Blind Stored XSS In "Report a Problem" on www.data.gov/issue/

07 Aug 2019 timeline

Maximum disclosed a bug submitted by protector47
Version Disclosure (NginX)

07 Aug 2019 timeline

Mail.ru disclosed a bug submitted by elmahdi
Unrestricted File Upload To Xss Stored [ https://ideas.browser.mail.ru/ ]

07 Aug 2019 timeline

Mail.ru disclosed a bug submitted by elmahdi
SSRF On [ allods.mail.ru ]

07 Aug 2019 timeline

Upserve disclosed a bug submitted by stealthy
Reflected XSS on https://inventory.upserve.com/ (affects IE users only)

06 Aug 2019 timeline

TTS Bug Bounty disclosed a bug submitted by ninja_cyber007
Information disclosure (system username, server info) in the x-amz-meta-s3cmd-attrs response header on data.gov

06 Aug 2019 timeline

Informatica disclosed a bug submitted by vinothkumar
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access

06 Aug 2019 timeline

Starbucks disclosed a bug submitted by spaceraccoon
SQL Injection Extracts Starbucks Enterprise Accounting, Financial, Payroll Database

06 Aug 2019 timeline

1 2 3 4 ... 355

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.