The unofficial HackerOne disclosure Timeline

WePay disclosed a bug submitted by esamhacks
Horizontal Privilege Escalation

19 Jun 2015 timeline

HackerOne disclosed a bug submitted by seifelsallamy
Open redirect in "Language change".

19 Jun 2015 timeline

HackerOne disclosed a bug submitted by mvcdabra
Email Notification should be get while changing Paypal Email

19 Jun 2015 timeline

PHP disclosed a bug submitted by ruben
Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow)

18 Jun 2015 timeline

Shopify disclosed a bug submitted by mafia
XSS at importing Product List

17 Jun 2015 timeline

Shopify disclosed a bug submitted by mafia
XSS at Bulk editing products

17 Jun 2015 timeline

Ruby on Rails disclosed a bug submitted by ff7f00
Denial of Service in Action Pack Exception Handling

16 Jun 2015 timeline

Ruby on Rails disclosed a bug submitted by joernchen
RCE due to Web Console IP Whitelist bypass in Rails 4.0 and 4.1

16 Jun 2015 timeline

Ruby on Rails disclosed a bug submitted by einstein_
JSON keys are not properly escaped

16 Jun 2015 timeline

Ruby on Rails disclosed a bug submitted by mastahyeti
rails-ujs will send CSRF tokens to other origins

16 Jun 2015 timeline

Coinbase disclosed a bug submitted by dia2diab
Two-factor authentication (via SMS)

16 Jun 2015 timeline

wont-fix

Twitter disclosed a bug submitted by hussein98d
Reporting user's profile by using another people's ID

11 Jun 2015 timeline

concrete5 disclosed a bug submitted by egix
SQL Injection Vulnerability in Concrete5 version 5.7.3.1

11 Jun 2015 timeline

Shopify disclosed a bug submitted by paulos_

11 Jun 2015 timeline

LibSass disclosed a bug submitted by richo
type confusion in Sass::ParserState::ParserState(Sass::ParserState const&)

11 Jun 2015 timeline

OpenSSL disclosed a bug submitted by ctz
Malformed ECParameters causes infinite loop

11 Jun 2015 timeline

Coin.Space disclosed a bug submitted by shubham
SMTP protection not used

10 Jun 2015 timeline

HackerOne disclosed a bug submitted by ashesh
Potential denial of service in hackerone.com/<program>/reward_settings

10 Jun 2015 timeline

HackerOne disclosed a bug submitted by ashesh
mailto: link injection on https://hackerone.com/directory

10 Jun 2015 timeline

Shopify disclosed a bug submitted by bobrov
[www.*.myshopify.com] CRLF Injection

10 Jun 2015 timeline

1 ... 287 288 289 290 291 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.