The unofficial HackerOne disclosure Timeline

Veris disclosed a bug submitted by itly
Critical IDOR - Make Rule for Any Group & Any Venue remotely

12 Jun 2016 timeline

Veris disclosed a bug submitted by itly
Critical IDOR - Get venue data of any organization remotely

12 Jun 2016 timeline

Uber disclosed a bug submitted by r0t1v
Enumerating userIDs with phone numbers

11 Jun 2016 timeline

Moneybird disclosed a bug submitted by krankopwnz

11 Jun 2016 timeline

Sucuri disclosed a bug submitted by jackds
CRLF/HTTP header injection www.sucuri.net

10 Jun 2016 timeline

Badoo disclosed a bug submitted by nikitchenko
????????? ????????? ???????? ???????????

09 Jun 2016 timeline

Binary.com disclosed a bug submitted by ameer0x0a
CJ vulnerability in subdomain

09 Jun 2016 timeline

Trello disclosed a bug submitted by thezawad

08 Jun 2016 timeline

LocalTapiola disclosed a bug submitted by billy_blaze
Possibly big authorization problem in Lähitapiola´s varainhoito

08 Jun 2016 timeline

Veris disclosed a bug submitted by footstep
Unauthenticated CSRF(User can input any value for CSRF Token)

08 Jun 2016 timeline

Phabricator disclosed a bug submitted by fnqgpc
Full path disclosure

08 Jun 2016 timeline

HackerOne disclosed a bug submitted by c666a323be94d57
RCE in profile picture upload

08 Jun 2016 timeline

Coinbase disclosed a bug submitted by anik
Transaction Pending Via Ip Change

07 Jun 2016 timeline

Uber disclosed a bug submitted by err
Password Reset Does Not Confirm the Existence of an Email Address

07 Jun 2016 timeline

New Relic disclosed a bug submitted by the_joker
Session takeover

06 Jun 2016 timeline

QIWI disclosed a bug submitted by ngaurav
SSL Certificate on qiwi.com will expire soon.

06 Jun 2016 timeline

Uber disclosed a bug submitted by jouko

06 Jun 2016 timeline

Uber disclosed a bug submitted by jouko

OneLogin authentication bypass on WordPress sites

06 Jun 2016 timeline

Automattic disclosed a bug submitted by akshyy
Remove anyone's pic gravtar

05 Jun 2016 timeline

Badoo disclosed a bug submitted by esevece
Tokens from services like Facebook can be stolen

03 Jun 2016 timeline

1 ... 322 323 324 325 326 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.