The unofficial HackerOne disclosure Timeline

Urban Dictionary disclosed a bug submitted by ak1t4
Text injection on Auth problem at urbandictionary.com

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by muhammadkhizerjaved
http://digital.starbucks.com/ Creation of Google G Suite Account on Behalf of starbucks.

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by ddworken
Persistent XSS in www.starbucks.com

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by yappare
Improper Validation on Cancel Link Redirect

17 Jan 2017 timeline

Instacart disclosed a bug submitted by footstep
Authentication Bypass in Updating Personal Information

17 Jan 2017 timeline

Imgur disclosed a bug submitted by strukt

Stored XSS in albums on http://m.imgur.com/

17 Jan 2017 timeline

Algolia disclosed a bug submitted by malcolmx
2-factor authentication bypass

17 Jan 2017 timeline

Nextcloud disclosed a bug submitted by rbcafe
HTTP-Basic Authentication on logs.nextcloud.com

17 Jan 2017 timeline

Boozt Fashion AB disclosed a bug submitted by m7mdharoun
xss in Theme http://bztfashion.booztx.com

16 Jan 2017 timeline

Nextcloud disclosed a bug submitted by dremos
Avatar image upload and bypass real image verification

15 Jan 2017 timeline

shopify-scripts disclosed a bug submitted by kelia
ruby DoS https://www.mruby.science

15 Jan 2017 timeline

shopify-scripts disclosed a bug submitted by raydot
Type confusion in wrap_decimal leading to memory corruption

15 Jan 2017 timeline

shopify-scripts disclosed a bug submitted by raydot
Null pointer dereference due to TOCTTOU bug in mrb_time_initialize

15 Jan 2017 timeline

Twitter disclosed a bug submitted by mishre
Twitter for android is exposing user's location to any installed android app

13 Jan 2017 timeline

Nextcloud disclosed a bug submitted by rbcafe
Disclosure of administrators via JSON on nextcloud.com Wordpress

13 Jan 2017 timeline

Nextcloud disclosed a bug submitted by dem0n
WordPress <= 4.6.1 Stored XSS Via Theme File

13 Jan 2017 timeline

Starbucks disclosed a bug submitted by id-is-vulnerable
Create New User Whilst Logged On

13 Jan 2017 timeline

Starbucks disclosed a bug submitted by meals
Parameter Manipulation allowed for viewing of other user’s teavana.com orders

13 Jan 2017 timeline

Starbucks disclosed a bug submitted by e3xpl0it
Dom Based Xss DIV.innerHTML parameters store.starbucks*

12 Jan 2017 timeline

Nextcloud disclosed a bug submitted by trichimtrich
Bad content-type in response header when getting document can lead to html injection

12 Jan 2017 timeline

1 ... 282 283 284 285 286 ... 434

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.