The unofficial HackerOne disclosure Timeline

HackerOne disclosed a bug submitted by lukasreschke
External links should use rel="noopener" or use the redirect service

05 Apr 2016 timeline

Shopify disclosed a bug submitted by secalert
XSS on https://app.shopify.com/

05 Apr 2016 timeline

HackerOne disclosed a bug submitted by paresh_parmar
New hacktivity view discloses report IDs of non-public reports

05 Apr 2016 timeline

Gratipay disclosed a bug submitted by niputiwari
An adversary can harvest email address for spamming.

05 Apr 2016 timeline

Gratipay disclosed a bug submitted by niputiwari
Getting Error Message and in use python version 2.7 is exposed.

05 Apr 2016 timeline

HackerOne disclosed a bug submitted by yaworsk

05 Apr 2016 timeline

VK.com disclosed a bug submitted by pisarenko
?????????? Twitter ?? ?????? ??????? ?? ! + ????????? ????? ?? ???????

04 Apr 2016 timeline

Zendesk disclosed a bug submitted by zombiehelp54

04 Apr 2016 timeline

ownCloud disclosed a bug submitted by hanno
Exploiting unauthenticated encryption mode

04 Apr 2016 timeline

Zendesk disclosed a bug submitted by zombiehelp54

04 Apr 2016 timeline

Zopim disclosed a bug submitted by pr0tagon1st
Chat History CSV Export Excel Injection Vulnerability

04 Apr 2016 timeline

ownCloud disclosed a bug submitted by cjusten
doc.owncloud.org has missing PHP handler

04 Apr 2016 timeline

Uber disclosed a bug submitted by albinowax
Reflected XSS on developer.uber.com via Angular template injection

04 Apr 2016 timeline

HackerOne disclosed a bug submitted by pikachu
Putting link inside link in markdown

02 Apr 2016 timeline

Gratipay disclosed a bug submitted by paresh_parmar
DMARC is misconfigured for grtp.co

02 Apr 2016 timeline

Gratipay disclosed a bug submitted by sai1996
Cookie Does Not Contain The "secure" Attribute

02 Apr 2016 timeline

Ubiquiti Networks disclosed a bug submitted by 93c08539
Buffer Overflow in PHP of the AirMax Products

01 Apr 2016 timeline

HackerOne disclosed a bug submitted by techguynoob
User with Read-Only permissions can edit the SwagAwarded Activities on Bug Reports

01 Apr 2016 timeline

InVision disclosed a bug submitted by niyaax
CRITICAL Stored XSS in https://projects.invisionapp.com

01 Apr 2016 timeline

HackerOne disclosed a bug submitted by techguynoob
User with Read-Only permissions can edit the Internal comment Activities on Bug Reports After Revoke the team access permissions

01 Apr 2016 timeline

1 ... 322 323 324 325 326 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.