The unofficial HackerOne disclosure Timeline

Algolia disclosed a bug submitted by my_life_is_bug_pls_fix_me
an xss issue

22 May 2016 timeline

Slack disclosed a bug submitted by sick-sec
Trick make all fixed open redirect links vulnerable again

22 May 2016 timeline

New Relic disclosed a bug submitted by ryhanson
Stored XSS through Angular Expression Sandbox Escape

22 May 2016 timeline

concrete5 disclosed a bug submitted by jfolkins
ProBlog 2.6.6 CSRF Exploit

22 May 2016 timeline

New Relic disclosed a bug submitted by arbaz_hussain
SUBDOMAIN TAKEOVER(FIXED)

21 May 2016 timeline

Vimeo disclosed a bug submitted by tomash
Private, embeddable videos leaks data through Facebook & Open Graph

21 May 2016 timeline

New Relic disclosed a bug submitted by shailesh4594
Open redirection on login

21 May 2016 timeline

HackerOne disclosed a bug submitted by pisarenko
DOS Report FILE html inside <code> in markdown

21 May 2016 timeline

Xero disclosed a bug submitted by dly

20 May 2016 timeline

New Relic disclosed a bug submitted by geeknik
https://rpm.newrelic.com/.htaccess file is world readable

20 May 2016 timeline

New Relic disclosed a bug submitted by trabajoduro_2
Clickjacking on authenticated pages which is inscope for New Relic

20 May 2016 timeline

Xero disclosed a bug submitted by droope
Insecure Payment System Integration

20 May 2016 timeline

LocalTapiola disclosed a bug submitted by aaditya_purani

20 May 2016 timeline

Dovecot disclosed a bug submitted by hari-cybex
DIrectory Listing Found

20 May 2016 timeline

Informatica disclosed a bug submitted by psychomantis

19 May 2016 timeline

HackerOne disclosed a bug submitted by ala_arfaoui
HackerOne Important Emails Notification are sent in clear-text

19 May 2016 timeline

OpenSSL disclosed a bug submitted by jurajsomorovsky
Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)

19 May 2016 timeline

HackerOne disclosed a bug submitted by teo
LinkedIN URL should be HTTPS

18 May 2016 timeline

Phabricator disclosed a bug submitted by vorpal
Passphrase credential lock bypass

18 May 2016 timeline

PHP disclosed a bug submitted by cyberpunkych
Null pointer deref (segfault) in stream_context_get_default

17 May 2016 timeline

1 ... 281 282 283 284 285 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.