The unofficial HackerOne disclosure Timeline

C2FO disclosed a bug submitted by bobrov
[admin.c2fo.com] Open Redirect

29 Oct 2016 timeline

Legal Robot disclosed a bug submitted by japzdivino
Bypass 8 chars password complexity with 6 chars only due to insecure password reset functionaliy

29 Oct 2016 timeline

HackerOne disclosed a bug submitted by staytuned
Information disclosure via policy update notifications after removal from program

29 Oct 2016 timeline

Whisper disclosed a bug submitted by shhnjk

28 Oct 2016 timeline

Pornhub disclosed a bug submitted by cyber-guard
Disclosure of private photos/albums - http://www.pornhub.com/album/show_image_box

28 Oct 2016 timeline

GitLab disclosed a bug submitted by yaworsk

28 Oct 2016 timeline

Automattic disclosed a bug submitted by bobrov
Follow Button XSS

28 Oct 2016 timeline

OLX disclosed a bug submitted by hogarth45
Reflective XSS at m.olx.ph

28 Oct 2016 timeline

Yelp disclosed a bug submitted by vinesh1989
Requesting Show CheckIn Alert for Non Friend User

27 Oct 2016 timeline

Yelp disclosed a bug submitted by badagent
Verification of E-Mail address possible on https://biz.yelp.com/login and https://biz.yelp.com/forgot

27 Oct 2016 timeline

Open-Xchange disclosed a bug submitted by dejavuln

27 Oct 2016 timeline

HackerOne disclosed a bug submitted by whhackersbr
(HackerOne SSO-SAML) Login CSRF, Open Redirect, and Self-XSS Possible Exploitation

27 Oct 2016 timeline

Zopim disclosed a bug submitted by bobrov
[status.zopim.com] Open Redirect

26 Oct 2016 timeline

Zopim disclosed a bug submitted by punkrock
Full Sub Domain Takeover at wx.zopim.net

26 Oct 2016 timeline

OLX disclosed a bug submitted by juliocesar
Full path disclosure vulnerability at http://corporate.olx.ph

26 Oct 2016 timeline

CloudFlare disclosed a bug submitted by albinowax
Reflected XSS on partners.cloudflare.com

26 Oct 2016 timeline

Brave Software disclosed a bug submitted by sahiltikoo
Denial of service attack(window object) on brave browser

25 Oct 2016 timeline

Brave Software disclosed a bug submitted by ibram
[ios] Address bar spoofing in Brave for iOS

25 Oct 2016 timeline

Pornhub disclosed a bug submitted by mikkz
Private Photo Disclosure - /user/stream_photo_attach?load=album&id= endpoint

25 Oct 2016 timeline

Harvest disclosed a bug submitted by pradeepch99
CSRF token fixation in Sign in with Google

25 Oct 2016 timeline

1 ... 319 320 321 322 323 ... 454

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.