The unofficial HackerOne disclosure Timeline

QIWI disclosed a bug submitted by kxyry
[rubm.qiwi.com] Yui charts.swf XSS

01 Dec 2016 timeline

Slack disclosed a bug submitted by kazan71p
Information Disclosure on stun.screenhero.com

30 Nov 2016 timeline

PortSwigger Web Security disclosed a bug submitted by sp1d3rs
Order-phishing via Payment ID URL

30 Nov 2016 timeline

Yelp disclosed a bug submitted by haquaman
Self-XSS via location cookie city field when getting suggestions for a new location

30 Nov 2016 timeline

Trello disclosed a bug submitted by ak1t4
Can run arbitrary script on em.trello.com

30 Nov 2016 timeline

PortSwigger Web Security disclosed a bug submitted by opnsec
XSS in IE11 on portswigger.net via Flash

30 Nov 2016 timeline

HackerOne disclosed a bug submitted by japzdivino
Internal attachments can be exported via "Export as .zip" feature

30 Nov 2016 timeline

Zendesk disclosed a bug submitted by gribdan
AWS S3 bucket writable for authenticated aws user

29 Nov 2016 timeline

Shopify disclosed a bug submitted by clarck-owen
Able to Login deactivated staff account in shopify app mobile

29 Nov 2016 timeline

Ubiquiti Networks disclosed a bug submitted by arneswinnen
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com

29 Nov 2016 timeline

Ubiquiti Networks disclosed a bug submitted by vibhuti_i
IDOR Causing Deletion of any account

29 Nov 2016 timeline

HackerOne disclosed a bug submitted by faisalahmed
Partial disclosure of report activity through new "Export as .zip" feature

29 Nov 2016 timeline

Slack disclosed a bug submitted by narendrabhati
Rate-limit bypass

28 Nov 2016 timeline

Coinbase disclosed a bug submitted by ahmed_anwer_mohamed
Application error message

28 Nov 2016 timeline

Coinbase disclosed a bug submitted by punkrock
Window.opener bug at www.coinbase.com

28 Nov 2016 timeline

Coinbase disclosed a bug submitted by xorgin
Information leakage on https://docs.gdax.com

28 Nov 2016 timeline

Coinbase disclosed a bug submitted by kaleemgiet
ByPassing the email Validation Email on Sign up process in mobile apps

28 Nov 2016 timeline

Informatica disclosed a bug submitted by strukt

28 Nov 2016 timeline

Veris disclosed a bug submitted by mr_sharma_
Reflected Cross site scripting

28 Nov 2016 timeline

Twitter disclosed a bug submitted by bains
XSS using javascript:alert(8007)

28 Nov 2016 timeline

1 ... 278 279 280 281 282 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.