The unofficial HackerOne disclosure Timeline

WePay disclosed a bug submitted by sl1m
2-step Verification bypass

20 Apr 2016 timeline

Mapbox disclosed a bug submitted by hussain
Stored Cross-Site Scripting in Map Share Page

19 Apr 2016 timeline

Mapbox disclosed a bug submitted by hussain
Disclosure of map information

19 Apr 2016 timeline

Informatica disclosed a bug submitted by konqi
[informatica.com] Blind SQL Injection

19 Apr 2016 timeline

HackerOne disclosed a bug submitted by paulos_

19 Apr 2016 timeline

GitLab disclosed a bug submitted by jobert
Bypassing password authentication of users that have 2FA enabled

18 Apr 2016 timeline

Imgur disclosed a bug submitted by sl1m
SSRF and local file read in video to gif converter

16 Apr 2016 timeline

Imgur disclosed a bug submitted by sl1m
Local file read in image editor

16 Apr 2016 timeline

Shopify disclosed a bug submitted by pratyush_saini
Bypassed password authentication before enabling OTP verification

15 Apr 2016 timeline

ownCloud disclosed a bug submitted by safa
doc.owncloud.org: XSS via Referrer

15 Apr 2016 timeline

Trello disclosed a bug submitted by kalihat007
Cross site scripting in blog.trello.com

14 Apr 2016 timeline

Adobe disclosed a bug submitted by skansing
Reflected XSS via. search

13 Apr 2016 timeline

Udemy disclosed a bug submitted by yog3ndra
Session Takeover vulnerability

13 Apr 2016 timeline

Xero disclosed a bug submitted by er_pratik_panchal_infobit
Vulnerability : XSS Vulnerability

13 Apr 2016 timeline

Dropbox disclosed a bug submitted by shield
No Rate Limiting while sending the feedback under Dropbox Help Centre

13 Apr 2016 timeline

Badoo disclosed a bug submitted by ngocdh
Password modification without knowing actual password & httpOnly bypass

12 Apr 2016 timeline

Badoo disclosed a bug submitted by kenan
Insecure Direct Object Reference on badoo.com

12 Apr 2016 timeline

Badoo disclosed a bug submitted by zombiehelp54

12 Apr 2016 timeline

OpenSSL disclosed a bug submitted by hanno
BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)

12 Apr 2016 timeline

ownCloud disclosed a bug submitted by kalihat007
Cross site scripting in apps.owncloud.com

12 Apr 2016 timeline

1 ... 331 332 333 334 335 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.