The unofficial HackerOne disclosure Timeline

HackerOne disclosed a bug submitted by intidc
HTML injection can lead to data theft

26 Jan 2016 timeline

Twitter disclosed a bug submitted by wesecureapp
IDOR- Activate Mopub on different organizations- steal api token- Fabric.io

25 Jan 2016 timeline

Square Open Source disclosed a bug submitted by bburky
git-fastclone allows arbitrary command execution through usage of ext remote URLs in submodules

25 Jan 2016 timeline

Square Open Source disclosed a bug submitted by bburky
Unsafe usage of Ruby string interpolation enabling command injection in git-fastclone

25 Jan 2016 timeline

ownCloud disclosed a bug submitted by haiderkamal
owncloud.help: Text Injection

23 Jan 2016 timeline

Imgur disclosed a bug submitted by charfee
XSS m.imgur.com

21 Jan 2016 timeline

withinsecurity disclosed a bug submitted by prashanth
content injection

21 Jan 2016 timeline

Imgur disclosed a bug submitted by charfee
XSS in imgur mobile 3

21 Jan 2016 timeline

Imgur disclosed a bug submitted by benmassaoud
Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.com

21 Jan 2016 timeline

Coinbase disclosed a bug submitted by datokaa
Big Bug with Vault which i have already reported: Case #606962

20 Jan 2016 timeline

PHP disclosed a bug submitted by libnex
Use After Free in sortWithSortKeys()

20 Jan 2016 timeline

withinsecurity disclosed a bug submitted by deepaktest30
Content Spoofing OR Text Injection in https://withinsecurity.com

20 Jan 2016 timeline

Trello disclosed a bug submitted by reactors08
DOM based XSS via Wistia embedding

20 Jan 2016 timeline

Shopify disclosed a bug submitted by s_p_q_r
[livechat.shopify.com] Cookie bomb at customer chats

19 Jan 2016 timeline

Imgur disclosed a bug submitted by charfee
XSS in imgur mobile

19 Jan 2016 timeline

Mail.Ru disclosed a bug submitted by konqi
[parapa.mail.ru] SQL Injection

18 Jan 2016 timeline

Shopify disclosed a bug submitted by krankopwnz

17 Jan 2016 timeline

withinsecurity disclosed a bug submitted by djamel-ghorab
text injection can be used in phishing 404 page should not include attacker text

16 Jan 2016 timeline

Twitter disclosed a bug submitted by hak
Subdomain Expired

15 Jan 2016 timeline

HackerOne disclosed a bug submitted by ashish_goanhacker

15 Jan 2016 timeline

1 ... 310 311 312 313 314 ... 385

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.