The unofficial HackerOne disclosure Timeline

RATELIMITED disclosed a bug submitted by yasinylcn17
Hackerone1

21 Dec 2018 timeline

FanDuel disclosed a bug submitted by mobius07
Passive mixed content issues on the site https://*.fanduel.com

21 Dec 2018 timeline

SEMrush disclosed a bug submitted by saya
User Controllable Cookie

21 Dec 2018 timeline

Starbucks disclosed a bug submitted by ozzyoz
Able to bypass information requirements before launching a Chat.

20 Dec 2018 timeline

RATELIMITED disclosed a bug submitted by hamad_iheb
Editable Wiki repo by anyone

20 Dec 2018 timeline

Uber disclosed a bug submitted by vijay_kumar1110

19 Dec 2018 timeline

Uber disclosed a bug submitted by reptou
XSS in ubermovement.com via editable Google Sheets

19 Dec 2018 timeline

Uber disclosed a bug submitted by hussain_0x3c
Reflected XSS in lert.uber.com

19 Dec 2018 timeline

Uber disclosed a bug submitted by hanuman1
SMS URL verification link does not expire on phone number change and lacks rate limiting

19 Dec 2018 timeline

Uber disclosed a bug submitted by vijay_kumar1110

19 Dec 2018 timeline

Uber disclosed a bug submitted by filedescryptor
lert.uber.com: Few default folders/files of AURA Framework are accessible

19 Dec 2018 timeline

Keybase disclosed a bug submitted by mirchr
Linux privilege escalation via trusted $PATH in keybase-redirector

18 Dec 2018 timeline

Keybase disclosed a bug submitted by xpn
Privilege Escalation via Keybase Helper

18 Dec 2018 timeline

Nextcloud disclosed a bug submitted by ezkbd
Ubuntu 12.04 Privilege Escalation

18 Dec 2018 timeline

OLX disclosed a bug submitted by lukeberner
Able to list user's public name, username, phone number, address, facebook ID...

17 Dec 2018 timeline

MyCrypto disclosed a bug submitted by shantuman
SPF Records (SMTP protection not used)

17 Dec 2018 timeline

Brave Software disclosed a bug submitted by mushicious
Field Day With Protocol Handlers

17 Dec 2018 timeline

YouPorn disclosed a bug submitted by prakharprasad

17 Dec 2018 timeline

Node.js third-party modules disclosed a bug submitted by dienpv
Prototype pollution attack (lutils-merge)

17 Dec 2018 timeline

OLX disclosed a bug submitted by pajoda
Search Page Reflected XSS on sharjah.dubizzle.com through unencoded output of GET parameter in JavaScript

16 Dec 2018 timeline

1 2 3 4 5 6 ... 321

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.