The unofficial HackerOne disclosure Timeline

Discourse disclosed a bug submitted by strukt

10 Jan 2017 timeline

CodeIgniter disclosed a bug submitted by rudrasarkar
Vulnerable Javascript library

10 Jan 2017 timeline

Discourse disclosed a bug submitted by knn
XSS Vulnerability on Image link parser

10 Jan 2017 timeline

Discourse disclosed a bug submitted by knn
XSS vulnerability on Audio and Video parsers

10 Jan 2017 timeline

VK.com disclosed a bug submitted by n1__
Stored XSS ? ?????? ??????????

10 Jan 2017 timeline

Discourse disclosed a bug submitted by muhammadkhizerjaved
DOM Based XSS in Discourse Search

10 Jan 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by dawgyg
XXE on DoD web server

09 Jan 2017 timeline

LocalTapiola disclosed a bug submitted by ak1t4
Error Page Content Spoofing or Text Injection (viestinta.lahitapiola.fi)

09 Jan 2017 timeline

Brave Software disclosed a bug submitted by aaditya_purani

08 Jan 2017 timeline

LocalTapiola disclosed a bug submitted by anandakshya
SQL Injection on viestinta.lahitapiola.fi

07 Jan 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by nahamsec

06 Jan 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by sulemanmalik03
Server side information disclosure

06 Jan 2017 timeline

U.S. Dept Of Defense disclosed a bug submitted by juliocesar
Reflected XSS in a Navy website

06 Jan 2017 timeline

OWOX, Inc. disclosed a bug submitted by hackerish
Access to Grafana Dashboard

06 Jan 2017 timeline

Coinbase disclosed a bug submitted by bugdiscloseguys
Authentication Issue

05 Jan 2017 timeline

Coinbase disclosed a bug submitted by ahmed_anwer_mohamed
Content Injection error page

05 Jan 2017 timeline

HackerOne disclosed a bug submitted by deepankerchawla
Information Disclosure in /skills call

05 Jan 2017 timeline

shopify-scripts disclosed a bug submitted by an0n-j
Deleting Key-value pair from Frozen HASH or Clearing a Frozen HASH

05 Jan 2017 timeline

Udemy disclosed a bug submitted by csanuragjain
Udemy s3 storage can be used by an attacker personal website because of missing CSRF Token

05 Jan 2017 timeline

Udemy disclosed a bug submitted by gribdan
AWS S3 bucket writable for authenticated aws user

05 Jan 2017 timeline

1 ... 299 300 301 302 303 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.