The unofficial HackerOne disclosure Timeline

Dropbox disclosed a bug submitted by maxon
Can make any number of dropbox accounts with one email

30 Aug 2016 timeline

Gratipay disclosed a bug submitted by i1ackerone
Reset Link Issue

30 Aug 2016 timeline

Legal Robot disclosed a bug submitted by muhaddimu
Click Jacking

29 Aug 2016 timeline

Legal Robot disclosed a bug submitted by muhammadkhizerjaved
UI Redressing ( ClickJacking ) Issue on Information submit form

29 Aug 2016 timeline

ok.ru disclosed a bug submitted by mthirup
http://217.20.144.201 privilege escalation in apache tomcat SessionEample-script

29 Aug 2016 timeline

Certly disclosed a bug submitted by cjlegacion
Business logic Failure - Browser cache management and logout vulnerability in Certly

29 Aug 2016 timeline

Legal Robot disclosed a bug submitted by punkit
Clickjacking: X-Frame-Options header missing

29 Aug 2016 timeline

Twitter disclosed a bug submitted by secgeek
Html Injection and Possible XSS in sms-be-vip.twitter.com

28 Aug 2016 timeline

New Relic disclosed a bug submitted by cisplatin
User enumeration possible from log-in timing difference

27 Aug 2016 timeline

New Relic disclosed a bug submitted by cisplatin
CSV Injection in sub_accounts.csv

27 Aug 2016 timeline

New Relic disclosed a bug submitted by scorppy
CSRF - Regenerate all admin api keys

27 Aug 2016 timeline

New Relic disclosed a bug submitted by aiacobelli
Server Side Browsing - localhost open port enumeration

27 Aug 2016 timeline

New Relic disclosed a bug submitted by ashish_goanhacker

27 Aug 2016 timeline

Legal Robot disclosed a bug submitted by smitgajra007
Email spoofing-fake mail from your mail domain server

27 Aug 2016 timeline

Legal Robot disclosed a bug submitted by spetr0x
2 vulns

27 Aug 2016 timeline

New Relic disclosed a bug submitted by malcolmx
Missing rate limit on password

26 Aug 2016 timeline

New Relic disclosed a bug submitted by grampae
http://newrelic.com SSRF/XSPA

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by fransrosen
Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.

26 Aug 2016 timeline

Nextcloud disclosed a bug submitted by spodermen
Content Injection - demo.nextcloud.com

26 Aug 2016 timeline

Legal Robot disclosed a bug submitted by hisham
Remote Code Execution (upload)

26 Aug 2016 timeline

1 ... 286 287 288 289 290 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.