The unofficial HackerOne disclosure Timeline

Shopify disclosed a bug submitted by rijalrojan
H1514 CSRF in Domain transfer allows adding your domain to other user's account

30 Mar 2020 timeline

Shopify disclosed a bug submitted by cryptographer
Session works after logout from Shopify account

30 Mar 2020 timeline

VK.com disclosed a bug submitted by bussy1
???????? ????????/??????????? ?? ????? ??????.

28 Mar 2020 timeline

HackerOne disclosed a bug submitted by qw3ty
program_analytics_benchmarks query shows information not visible in public

27 Mar 2020 timeline

NordVPN disclosed a bug submitted by needmoneyasap
Hard-coded API keys at NordVpn Android App

27 Mar 2020 timeline

Informatica disclosed a bug submitted by min4tor
RXSS in http://procurement-businesscatalog.informatica.com

27 Mar 2020 timeline

Twitter disclosed a bug submitted by meepmerp
User input validation can lead to DOS

26 Mar 2020 timeline

NordVPN disclosed a bug submitted by d4rk_g1rl
Unauthorized User Can Delete Any User Account

26 Mar 2020 timeline

Visma Bug Bounty Program disclosed a bug submitted by muon4
SSRF in img export

26 Mar 2020 timeline

Visma Bug Bounty Program disclosed a bug submitted by muon4
Stored XSS when uploading files to an invoice

26 Mar 2020 timeline

Valve disclosed a bug submitted by kohtep2010
Malformed BSP in GoldSrc Engine may cause shellcode injection

25 Mar 2020 timeline

Valve disclosed a bug submitted by kohtep2010
Vulnerability in GoldSource Engine allows to upload and run an arbitrary DLL on client

25 Mar 2020 timeline

Valve disclosed a bug submitted by hunterstanton
Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exe

25 Mar 2020 timeline

Qulture.Rocks disclosed a bug submitted by pain45
Privilege escalation from member user ( editor ) to admin user

25 Mar 2020 timeline

Twitter disclosed a bug submitted by naategh
Reset password without knowing current password

25 Mar 2020 timeline

Vanilla disclosed a bug submitted by mindingdata
XSS For Profile Name

25 Mar 2020 timeline

Vanilla disclosed a bug submitted by mindingdata
Conversation API Leaks Details Of UnAuthorized Conversations

25 Mar 2020 timeline

Visma Bug Bounty Program disclosed a bug submitted by base_64
[IDOR]Ability to Pause & Resume the Invoice of other users If GUID is known.

25 Mar 2020 timeline

Visma Bug Bounty Program disclosed a bug submitted by base_64
[IDOR]Ability to View/Delete/Edit (Forward to attachment archive) Email of other user if GUID is known.

25 Mar 2020 timeline

Stripo Inc disclosed a bug submitted by pain45
XSRF Token is Not being validated when sending emails test request which lead to CSRF attack using the flash file + 307 redirect technique

25 Mar 2020 timeline

1 2 3 4 5 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.