The unofficial HackerOne disclosure Timeline

arkadiyt-projects disclosed a bug submitted by priyankvadaliya
Feature-Policy Header is Missing and Pastebin files

05 Aug 2019 timeline

Kartpay disclosed a bug submitted by eissen5c
Application Design issue for Phone Number field in Registration.

05 Aug 2019 timeline

Kartpay disclosed a bug submitted by iheb_hamad1
Captcha protection Bypass on Forgot password page

05 Aug 2019 timeline

Automattic disclosed a bug submitted by albinowax
Disclosure of 152 cookie names via crafted input

04 Aug 2019 timeline

Ubiquiti Networks disclosed a bug submitted by grampae
Resource Consumption DOS on Edgemax v1.10.6

04 Aug 2019 timeline

Mail.ru disclosed a bug submitted by humanoidphantom
Make user buy items via clickjacking possibility

04 Aug 2019 timeline

Pornhub disclosed a bug submitted by justas_b
Single User DOS by Poisoning Cookie via Get Parameter

03 Aug 2019 timeline

HackerOne disclosed a bug submitted by asad0x01_
Total bounties paid amount is disclosed because of redesign of the Program Profiles

02 Aug 2019 timeline

Khan Academy disclosed a bug submitted by red_assassin
RTL override char allowed at https://www.khanacademy.org/computer-programming/link_redirector?url=*

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by theappsec
[lootdog.io] User phone number disclosure

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by godexmachine
[https://pandao.ru] - PUT method available

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by secator
[XSS] iframe ? payments/phones

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by secator
[XSS] data-url ? ???????

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by ilyailya
??? ????????? lootdog ? ??????????? ?? ?????????.

02 Aug 2019 timeline

Mail.ru disclosed a bug submitted by bobrov
[o2.mail.ru] nginx alias traversal

02 Aug 2019 timeline

Nextcloud disclosed a bug submitted by j4tayu
SignUp using Fake Email

02 Aug 2019 timeline

Grammarly disclosed a bug submitted by metnew
Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's origin

01 Aug 2019 timeline

Kartpay disclosed a bug submitted by c00lbugs
Error Page Content Spoofing or Text Injection [https://vpn.kartpay.com/]

01 Aug 2019 timeline

OLX disclosed a bug submitted by codeslayer137
Cross-site Scripting (XSS) - Reflected

31 Jul 2019 timeline

TTS Bug Bounty disclosed a bug submitted by tikoo_sahil
Improper Session management can cause account takeover[https://micropurchase.18f.gov]

30 Jul 2019 timeline

1 2 3 4 5 ... 355

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.