The unofficial HackerOne disclosure Timeline

Django disclosed a bug submitted by j3ssie
Jenkins Unauthenticated RCE on https://djangoci.com/

16 May 2019 timeline

WordPress disclosed a bug submitted by simonscannell
CSRF to HTML Injection in Comments

13 May 2019 timeline

GitLab disclosed a bug submitted by 8ayac
DoS on the Issue page by exploiting Mermaid.

13 May 2019 timeline

Dropbox disclosed a bug submitted by pikamander2
Forum posts and private messages are poorly sanitized, allowing execution of arbitrary JavaScript

13 May 2019 timeline

Smule disclosed a bug submitted by dhakalananda
Missing Rate Limit in Forgot Password can Lead to email address leakage of all smule accounts

13 May 2019 timeline

Mail.ru disclosed a bug submitted by mehulpanchal007
CSRF on /subscription_manage.php endpoint at allods.mail.ru

13 May 2019 timeline

Mail.ru disclosed a bug submitted by stealthy
Seven DOM-Based XSS Vulnerabilities | Execution in Login Sequence

13 May 2019 timeline

Shopify disclosed a bug submitted by 3rd4l
help.shopify.com Cross Site Scripting

12 May 2019 timeline

Nextcloud disclosed a bug submitted by ayid
Stored XSS in OAuth redirect URI

11 May 2019 timeline

WePay disclosed a bug submitted by mobius07
Active mixed content issues on the site https://stage-go.wepay.com.

11 May 2019 timeline

MariaDB disclosed a bug submitted by rudrahacks007
smtp service vulnerable to POODLE SSLv3

11 May 2019 timeline

Shopify disclosed a bug submitted by h13-
Order Creation Webhooks can be edited/deleted by STAFF with `Settings` only permission

11 May 2019 timeline

VK.com disclosed a bug submitted by pisarenko
???????? ???? ?? ???????? ???????????? ??? ?????? ??????? ???? ??????? ? ??

10 May 2019 timeline

VK.com disclosed a bug submitted by catferq
????????? ???? ??? ? ????????? ?????????? ? ??????? ?????? ???????????

10 May 2019 timeline

VK.com disclosed a bug submitted by povargek
?????? ????????? ???? ?????? ???????? ????? (????? ??????? ???), ????? ??? ????? ??? remixsid ? ??? ?? ?????, ? ????????? ???????? ??????.

10 May 2019 timeline

VK.com disclosed a bug submitted by randbug101
[0.vk.com] Reflected XSS ?? ???????? ?????????????.

10 May 2019 timeline

Monero disclosed a bug submitted by guido

10 May 2019 timeline

Passit disclosed a bug submitted by whitehacker18
URL is vulnerable to clickjacking https://app.passit.io/

10 May 2019 timeline

Twitter disclosed a bug submitted by 0xsobky
XSS via Direct Message deeplinks

09 May 2019 timeline

Aeternity disclosed a bug submitted by ecneladis
Remote Code Execution in epoch via epmd

09 May 2019 timeline

1 2 3 4 5 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.