The unofficial HackerOne disclosure Timeline

Certly disclosed a bug submitted by cjlegacion
Business logic Failure - Browser cache management and logout vulnerability in Certly

29 Aug 2016 timeline

Legal Robot disclosed a bug submitted by punkit
Clickjacking: X-Frame-Options header missing

29 Aug 2016 timeline

Twitter disclosed a bug submitted by secgeek
Html Injection and Possible XSS in sms-be-vip.twitter.com

28 Aug 2016 timeline

New Relic disclosed a bug submitted by cisplatin
User enumeration possible from log-in timing difference

27 Aug 2016 timeline

New Relic disclosed a bug submitted by cisplatin
CSV Injection in sub_accounts.csv

27 Aug 2016 timeline

New Relic disclosed a bug submitted by scorppy
CSRF - Regenerate all admin api keys

27 Aug 2016 timeline

New Relic disclosed a bug submitted by aiacobelli
Server Side Browsing - localhost open port enumeration

27 Aug 2016 timeline

New Relic disclosed a bug submitted by ashish_goanhacker

27 Aug 2016 timeline

Legal Robot disclosed a bug submitted by smitgajra007
Email spoofing-fake mail from your mail domain server

27 Aug 2016 timeline

Legal Robot disclosed a bug submitted by spetr0x
2 vulns

27 Aug 2016 timeline

New Relic disclosed a bug submitted by malcolmx
Missing rate limit on password

26 Aug 2016 timeline

New Relic disclosed a bug submitted by grampae
http://newrelic.com SSRF/XSPA

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by fransrosen
Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.

26 Aug 2016 timeline

Nextcloud disclosed a bug submitted by spodermen
Content Injection - demo.nextcloud.com

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by hisham
Remote Code Execution (upload)

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by ysx
Information Disclosure in AWS S3 Bucket

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by 0x00iam_hack3r
Amazon Bucket Accessible (http://legalrobot.s3.amazonaws.com/)

26 Aug 2016 timeline

Moneybird disclosed a bug submitted by japongskie
Logging out any user

26 Aug 2016 timeline

Moneybird disclosed a bug submitted by a5tronaut
Content Spoofing In Moneybird

26 Aug 2016 timeline

Nextcloud disclosed a bug submitted by spodermen
Content Injection - apps.nextcloud.com

26 Aug 2016 timeline

1 ... 271 272 273 274 275 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.