The unofficial HackerOne disclosure Timeline

Gratipay disclosed a bug submitted by a0xnirudh

08 Apr 2017 timeline

Informatica disclosed a bug submitted by yarbabin
[app.informaticaondemand.com] XXE

08 Apr 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by generaleg
Bypass file access control vulnerability on a DoD website

07 Apr 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by wrench
Remote Command Execution on a DoD website

07 Apr 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by juliocesar
Cross-site scripting (XSS) vulnerability on a DoD website

07 Apr 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by konduru-jashwanth
Reflected cross-site scripting vulnerability on a DoD website

07 Apr 2017 timeline

Ubiquiti Networks disclosed a bug submitted by edio
Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.

07 Apr 2017 timeline

Informatica disclosed a bug submitted by modam3rly
[careers.informatica.com] XSS on "isJTN"

07 Apr 2017 timeline

OLX disclosed a bug submitted by gayatriracha
cross-site scripting in get request

07 Apr 2017 timeline

OLX disclosed a bug submitted by madhur_bhargava
olx.ph is vulnerable to POODLE attack

07 Apr 2017 timeline

QIWI disclosed a bug submitted by cyberunit
Content Spoofing in mango.qiwi.com

06 Apr 2017 timeline

QIWI disclosed a bug submitted by cyberunit
Open Redirect in meeting.qiwi.com

06 Apr 2017 timeline

OLX disclosed a bug submitted by ph0b0s
Reflected XSS in olx.pt

06 Apr 2017 timeline

Twitter disclosed a bug submitted by mindaugas
SSRF in https://cards-dev.twitter.com/validator

06 Apr 2017 timeline

GitLab disclosed a bug submitted by eadz
Open redirect

06 Apr 2017 timeline

OLX disclosed a bug submitted by mohamedsherif
yaman.olx.ph/wordpress is using a very vulnerable version of WordPress and contains directory listing

06 Apr 2017 timeline

GitLab disclosed a bug submitted by ysx
[Repository Import] Open Redirect via "continue[to]" parameter

06 Apr 2017 timeline

Phabricator disclosed a bug submitted by edio
Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.

05 Apr 2017 timeline

Gratipay disclosed a bug submitted by mhashim29
Inadequate/dangerous jQuery behavior

05 Apr 2017 timeline

HackerOne disclosed a bug submitted by 0xffe4
Transitioning a Private Program to Public Does Not Clear Previously Private Updates to Hackers

05 Apr 2017 timeline

1 ... 274 275 276 277 278 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.