The unofficial HackerOne disclosure Timeline

HackerOne disclosed a bug submitted by brdoors2
Logic error with notifications: user that has left team continues to receive notifications and can not 'clean' this area on account

04 Jun 2015 timeline

Dropbox disclosed a bug submitted by mahitman
XSS in https://hackpad.com/

02 Jun 2015 timeline

Shopify disclosed a bug submitted by lccunha
Authentication Failed Mobile version

02 Jun 2015 timeline

Vimeo disclosed a bug submitted by dor1s

31 May 2015 timeline

Shopify disclosed a bug submitted by sukhjiwansingh
Stored XSS in the Shopify Discussion Forums

31 May 2015 timeline

Python disclosed a bug submitted by johnleitch
Python: imageop Unsafe Arithmetic

31 May 2015 timeline

Slack disclosed a bug submitted by satishb3
Team admin can change unauthorized team setting (allow_message_deletion)

30 May 2015 timeline

HackerOne disclosed a bug submitted by mathias

28 May 2015 timeline

HackerOne disclosed a bug submitted by dutchgraa
PNG compression DoS

28 May 2015 timeline

HackerOne disclosed a bug submitted by introvertmac
Logical issues with account settings

28 May 2015 timeline

HackerOne disclosed a bug submitted by introvertmac
Email spoofing

28 May 2015 timeline

HackerOne disclosed a bug submitted by xtross1
Autocomplete enabled in Paypal preferences

28 May 2015 timeline

HackerOne disclosed a bug submitted by dawidczagan
Issue with remember_user_token

28 May 2015 timeline

HackerOne disclosed a bug submitted by dawidczagan
Issue with password change

28 May 2015 timeline

HackerOne disclosed a bug submitted by danielchatfield
External URL page bypass

28 May 2015 timeline

Sucuri disclosed a bug submitted by masatokinugawa
Open Redirect in unmask.sucuri.net

27 May 2015 timeline

Romit disclosed a bug submitted by kabeel
Email Enumeration (POC)

27 May 2015 timeline

Coinbase disclosed a bug submitted by mohdhaji87
New Device confirmation tokens are not properly validated.

25 May 2015 timeline

Coinbase disclosed a bug submitted by alihasanghauri
New Device Confirmation, token is valid until not used.

24 May 2015 timeline

Twitter disclosed a bug submitted by deepak_das

23 May 2015 timeline

wont-fix

1 ... 324 325 326 327 328 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.