The unofficial HackerOne disclosure Timeline

Uber disclosed a bug submitted by fransrosen
Subdomain takeover on rider.uber.com due to non-existent distribution on Cloudfront

12 Dec 2016 timeline

Twitter disclosed a bug submitted by ullger
Circumventing the Twitter account lockout process [ACCOUNT TAKEOVER]

12 Dec 2016 timeline

Ubiquiti Networks disclosed a bug submitted by shubham
Reflected Xss in AirMax [Nanostation Loco M2]

12 Dec 2016 timeline

Twitter disclosed a bug submitted by lewerkun
Information Disclosure through .DS_Store in ??????????

12 Dec 2016 timeline

CERT/CC disclosed a bug submitted by ahmed_anwer_mohamed
manipulate the Practical HTTP Host header

12 Dec 2016 timeline

Gratipay disclosed a bug submitted by edio
Gratipay uses the random module's cryptographically insecure PRNG.

12 Dec 2016 timeline

Mail.Ru disclosed a bug submitted by s_p_q_r
[torg.mail.ru] CRLF Injection

12 Dec 2016 timeline

WePay disclosed a bug submitted by cablej

11 Dec 2016 timeline

LocalTapiola disclosed a bug submitted by rooter
Option method enabled (viestinta.lahitapiola.fi)

11 Dec 2016 timeline

OLX disclosed a bug submitted by lucasm
stored XSS in olx.pl - ogloszenie TITLE element - moderator acc can be hacked

11 Dec 2016 timeline

LocalTapiola disclosed a bug submitted by shailesh4594
Open redirection protection bypass (/cs/Satellite)

10 Dec 2016 timeline

LocalTapiola disclosed a bug submitted by th3g3nt3lman
XSS and open redirect in verkkopalvelu.lahitapiola.fi

10 Dec 2016 timeline

LocalTapiola disclosed a bug submitted by bobrov
HTML Injection in email /webApp/lahti (viestinta.lahitapiola.fi)

10 Dec 2016 timeline

LocalTapiola disclosed a bug submitted by billy_blaze
Lahitapiola´s customer names send to 3rd party

10 Dec 2016 timeline

Twitter disclosed a bug submitted by linkks
Cross-site scripting (reflected)

09 Dec 2016 timeline

Informatica disclosed a bug submitted by robd4k
[now.informatica.com] Reflective XSS

09 Dec 2016 timeline

Informatica disclosed a bug submitted by yarbabin
[marketplace.informatica.com] - XXE

09 Dec 2016 timeline

Informatica disclosed a bug submitted by yarbabin
[marketplace.informatica.com] - XXE

09 Dec 2016 timeline

Informatica disclosed a bug submitted by yarbabin
[rev-app.informatica.com] - XXE via SAML

09 Dec 2016 timeline

Envoy disclosed a bug submitted by zephrfish

08 Dec 2016 timeline

1 ... 290 291 292 293 294 ... 434

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.