The unofficial HackerOne disclosure Timeline

ICQ disclosed a bug submitted by cybercdh
ICQ Windows Application is Vulnerable to DLL Search Order Hijacking

06 Jul 2019 timeline

ICQ disclosed a bug submitted by jplopezy
FLV FILE FORMAT (AUDIOSES.DLL) Out of Bounds

06 Jul 2019 timeline

Automattic disclosed a bug submitted by ksapphire
Gaining unlimited bonus points on websites with WooCommerce Points and Rewards

05 Jul 2019 timeline

Shopify disclosed a bug submitted by ngalog
[Privilege Escalation] Shopify Admin -- Permission from Settings to Customer

05 Jul 2019 timeline

HackerOne disclosed a bug submitted by jobert
Custom Field Attributes may be created and updated for customers with Custom Field Trial enabled

05 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
SSRF in VCARD photo upload functionality

05 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
SSRF in /appsuite/api/autoconfig

05 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
SSRF - RSS feed, blacklist bypass (301 re-direct)

05 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
SSRF - Blacklist bypass for mail account addition

05 Jul 2019 timeline

VK.com disclosed a bug submitted by povargek
??????? 2FA ?/??? ???????? access_token, ???? ?? ?????-???? ???? ?? ???????? ??????

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by s1ck-sec
Stored XSS in Email attachment file name

04 Jul 2019 timeline

Shopify disclosed a bug submitted by pklfpklf
HTML injection in https://interviewing.shopify.com/index.php?candidate=

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
SSRF - RSS feed, blacklist bypass (IP Formatting)

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by logan5
IDOR - setAttribute action of user object in API

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by ranjit_p
IDOR to view other user folder name

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by ranjit_p
IDOR allow to extract all registered email

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by mishre
Adding external participants to unaccessible appointments

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by mishre
[IDOR] Deleting other people's tasks

04 Jul 2019 timeline

OX App Suite disclosed a bug submitted by chihuahua
store xss in calendar via upload filename

04 Jul 2019 timeline

Node.js third-party modules disclosed a bug submitted by inkz
[domokeeper] Unintended Require

04 Jul 2019 timeline

1 2 3 4 5 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.