The unofficial HackerOne disclosure Timeline

Vimeo disclosed a bug submitted by optimus_prime
No Limitation on Following allows user to follow people automatically!

02 May 2016 timeline

Zaption disclosed a bug submitted by bugs3ra
Using GET method for account login with CSRF token leaking to external sites Via Referer.

02 May 2016 timeline

New Relic disclosed a bug submitted by trabajoduro_2
Too many included lookups

02 May 2016 timeline

Veris disclosed a bug submitted by niemand
XSS on multiple fields

02 May 2016 timeline

Python disclosed a bug submitted by johnleitch
Python 2.7 strop.replace Integer Overflow

02 May 2016 timeline

PHP disclosed a bug submitted by rewzilla
php_snmp_error() Format String Vulnerability

01 May 2016 timeline

Slack disclosed a bug submitted by my_life_is_bug_pls_fix_me
an xss issue in https://hunter22.slack.com/help/requests/793043

30 Apr 2016 timeline

HackerOne disclosed a bug submitted by nismo
SECURITY: Referencing previous Reports attachment_IDs on new Reports via Draft_Sync DELETES Attachments

30 Apr 2016 timeline

Gratipay disclosed a bug submitted by ahmed_abdalla
text injection in website title

30 Apr 2016 timeline

ok.ru disclosed a bug submitted by 4lemon
??????? ????? ???????, ??? ??? ?????.

29 Apr 2016 timeline

ok.ru disclosed a bug submitted by 4lemon
(URGENT!) ??????? OK ???????, ??? ?? ?????

29 Apr 2016 timeline

ok.ru disclosed a bug submitted by 4lemon
?????? ? ????? ????????? ??????????? (3) ????? ??????? ?????

29 Apr 2016 timeline

ok.ru disclosed a bug submitted by 4lemon
?????? ? ????? ????????? ???????.

29 Apr 2016 timeline

Twitter disclosed a bug submitted by maxy
Tweetdeck (twitter owned app) not revoked

29 Apr 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by vagg-a-bond
Information Disclosure in Error Page

29 Apr 2016 timeline

Urban Dictionary disclosed a bug submitted by ishahriyar
Cross-Site Scripting Vulnerability in urbandictionary.com

28 Apr 2016 timeline

Automattic disclosed a bug submitted by spam404
XSS on www.wordpress.com

28 Apr 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by waqar_vicky
DNSsec not configured

27 Apr 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by sumitcfe
Missing SPF for paragonie.com

27 Apr 2016 timeline

Mapbox disclosed a bug submitted by niemand
XSS (cross-site scripting) on www.mapbox.com/maki

27 Apr 2016 timeline

1 ... 302 303 304 305 306 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.