The unofficial HackerOne disclosure Timeline

Vimeo disclosed a bug submitted by opnsec
All Vimeo Private videos disclosure via Authorization Bypass

29 Jul 2016 timeline

Vimeo disclosed a bug submitted by opnsec
CSRF on Vimeo via cross site flashing leading to info disclosure and private videos go public

29 Jul 2016 timeline

Shopify disclosed a bug submitted by capripio
Owner/Staff force to redirect to malware Shopify page

28 Jul 2016 timeline

Shopify disclosed a bug submitted by nismo
XSS in Draft Orders in Timeline i SHOPIFY Admin Site!

28 Jul 2016 timeline

PHP disclosed a bug submitted by evonide
ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize

28 Jul 2016 timeline

PHP disclosed a bug submitted by evonide
Use After Free Vulnerability in PHP's GC algorithm and unserialize

28 Jul 2016 timeline

PHP disclosed a bug submitted by rc0r
Buffer overflow in HTTP url parsing functions

28 Jul 2016 timeline

Imgur disclosed a bug submitted by fransrosen
Reflected Flash XSS using swfupload.swf with an epileptic reloading to bypass the button-event

28 Jul 2016 timeline

Moneybird disclosed a bug submitted by a5tronaut
Open Redirect vulnerability in moneybird.com

28 Jul 2016 timeline

GitLab disclosed a bug submitted by jobert
Persistent XSS on public wiki pages

27 Jul 2016 timeline

Nextcloud disclosed a bug submitted by shoveller
help.nextcloud.com: Known DoS condition (null pointer deref) in Nginx running

27 Jul 2016 timeline

GitLab disclosed a bug submitted by jobert
Privilege escalation to access all private groups and repositories

27 Jul 2016 timeline

Uber disclosed a bug submitted by jouko

27 Jul 2016 timeline

Shopify disclosed a bug submitted by zombiehelp54

27 Jul 2016 timeline

Pornhub disclosed a bug submitted by static
[phpobject in cookie] Remote shell/command execution

27 Jul 2016 timeline

Pornhub disclosed a bug submitted by jahrek
Weak user aunthentication on mobile application - I just broken userKey secret password

27 Jul 2016 timeline

Pornhub disclosed a bug submitted by dremos
(Pornhub & Youporn & Brazzers ANDROID APP) : Upload Malicious APK / Overrite Existing APK / Android BackOffice Access

27 Jul 2016 timeline

Bime disclosed a bug submitted by jobert
Urgent: attacker can access every data source on Bime

27 Jul 2016 timeline

Bime disclosed a bug submitted by jobert
Attacker can access graphic representation of every query

27 Jul 2016 timeline

ok.ru disclosed a bug submitted by hardc0re
Multiple critical vulnerabilities in Odnoklassniki Android application

26 Jul 2016 timeline

1 ... 335 336 337 338 339 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.