The unofficial HackerOne disclosure Timeline

Brave Software disclosed a bug submitted by scorpyo
[website] Script injection in newsletter signup https://brave.com/brave_youth_program_signup.html

03 Nov 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by hackerone_hero
DMARC Not found for paragonie.com URGENT

03 Nov 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by sstok
Not clearing hex-decoded variable after usage in Authentication

03 Nov 2016 timeline

GitLab disclosed a bug submitted by jobert
Read files on application server, leads to RCE

03 Nov 2016 timeline

OLX disclosed a bug submitted by yashmaurya
Reflected XSS in OLX.in

02 Nov 2016 timeline

Informatica disclosed a bug submitted by zephrfish

02 Nov 2016 timeline

Nextcloud disclosed a bug submitted by elamaran619
[Thirdparty] Stored XSS in chat module - nextcloud server 9.0.51 installed in ubuntu 14.0.4 LTS

02 Nov 2016 timeline

ownCloud disclosed a bug submitted by bobrov
[api.owncloud.org] CRLF Injection

02 Nov 2016 timeline

ownCloud disclosed a bug submitted by bobrov
[doc.owncloud.org] CRLF Injection

02 Nov 2016 timeline

leetfiles disclosed a bug submitted by bobrov
[leetfil.es] MSIE, Edge XSS via Request-URI

02 Nov 2016 timeline

Dropbox disclosed a bug submitted by bobrov
[monitor.sjc.dropbox.com] CRLF Injection

02 Nov 2016 timeline

Greenhouse.io disclosed a bug submitted by bobrov
[greenhouse.io] CRLF Injection / Insecure nginx configuration

02 Nov 2016 timeline

Mail.Ru disclosed a bug submitted by murthysagi
Mail.ru for Android Content Provider Vulnerability

02 Nov 2016 timeline

Harvest disclosed a bug submitted by vagg-a-bond
Project Disclosure of all Harvest Instances

01 Nov 2016 timeline

Slack disclosed a bug submitted by procode701
Email information leakage for certain addresses

31 Oct 2016 timeline

Boozt Fashion AB disclosed a bug submitted by inhibitor181
Make victim buy in attacker's account without any idea - http://www.booztlet.com/

31 Oct 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by hextitan
[Airship CMS] Local File Inclusion - RST Parser

31 Oct 2016 timeline

Nextcloud disclosed a bug submitted by ahsantahir
Content spoofing due to the improper behavior of the 403 page in Private Server

31 Oct 2016 timeline

Harvest disclosed a bug submitted by eboda

Invoices can be added to any retainers - even closs-platform

29 Oct 2016 timeline

Zaption disclosed a bug submitted by bobrov
[zaption.com] Open Redirect

29 Oct 2016 timeline

1 ... 318 319 320 321 322 ... 454

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.