The unofficial HackerOne disclosure Timeline

PHP disclosed a bug submitted by ryat
Use After Free Vulnerability in session deserializer

01 Sep 2015 timeline

PHP disclosed a bug submitted by ryat
Use after free vulnerability in unserialize() with GMP

01 Sep 2015 timeline

PHP disclosed a bug submitted by haquaman
Buffer over-read in exif_read_data with TIFF IFD tag

01 Sep 2015 timeline

QIWI disclosed a bug submitted by kxyry
[ishop.qiwi.com] XSS + Misconfiguration

31 Aug 2015 timeline

HackerOne disclosed a bug submitted by techguynoob
Private Program and bounty details disclosed as part of JSON search response

31 Aug 2015 timeline

Shopify disclosed a bug submitted by mdv
XSS https://www.shopify.com/signup

31 Aug 2015 timeline

Flox disclosed a bug submitted by pradeepch99
Content spoofing through Referel header

29 Aug 2015 timeline

Keybase disclosed a bug submitted by mafia
NO SPF RECORDS

28 Aug 2015 timeline

Keybase disclosed a bug submitted by mom
SMTP protection not used

28 Aug 2015 timeline

Phabricator disclosed a bug submitted by jbeta
Dashboard panel embedded onto itself causes a denial of service

27 Aug 2015 timeline

concrete5 disclosed a bug submitted by jmpalk
No csrf protection on index.php/ccm/system/user/add_group, index.php/ccm/system/user/remove_group

26 Aug 2015 timeline

concrete5 disclosed a bug submitted by jmpalk
No CSRF protection when creating new community points actions, and related stored XSS

26 Aug 2015 timeline

DigitalSellz disclosed a bug submitted by s_p_q_r
The email updates issues

25 Aug 2015 timeline

DigitalSellz disclosed a bug submitted by s_p_q_r
The product/status method CSRF

25 Aug 2015 timeline

Shopify disclosed a bug submitted by alpha
SSRF via 'Insert Image' feature of Products/Collections/Frontpage

24 Aug 2015 timeline

Zaption disclosed a bug submitted by aaj
Open redirect filter bypass

24 Aug 2015 timeline

Shopify disclosed a bug submitted by 00day
XSS https://delivery.shopifyapps.com/ (Digital Downloads App in myshopify.com)

24 Aug 2015 timeline

PHP disclosed a bug submitted by haquaman
Null pointer deref (segfault) in spl_autoload via ob_start

23 Aug 2015 timeline

Gratipay disclosed a bug submitted by bobrov
[gratipay.com] CRLF Injection

20 Aug 2015 timeline

Yahoo! disclosed a bug submitted by panchocosil
Store XSS Flicker main page

14 Aug 2015 timeline

1 ... 326 327 328 329 330 ... 385

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.