The unofficial HackerOne disclosure Timeline

GitLab disclosed a bug submitted by jobert
User with guest access can access private merge requests

23 Jan 2017 timeline

GitLab disclosed a bug submitted by jobert
Users with guest access can post notes to private merge requests, issues, and snippets

23 Jan 2017 timeline

Informatica disclosed a bug submitted by e3xpl0it
[afocusp.informatica.com] Sql injection afocusp.informatica.com:37777

21 Jan 2017 timeline

Informatica disclosed a bug submitted by e3xpl0it
[ipm.informatica.com] Sql injection Oracle

21 Jan 2017 timeline

Slack disclosed a bug submitted by yassineaboukir
[Screenhero] Subdomain takeover

21 Jan 2017 timeline

Maximum disclosed a bug submitted by akhmm
Facebook and twitter page claimed of maximum.com [important]

21 Jan 2017 timeline

Legal Robot disclosed a bug submitted by swapnil755
Email spoofing possible via Legal Robot domain

21 Jan 2017 timeline

Discourse disclosed a bug submitted by skavans
Stored XSS in topics because of whitelisted_generic engine vulnerability

20 Jan 2017 timeline

Discourse disclosed a bug submitted by skavans
XSS in topics because of bandcamp preview engine vulnerability

20 Jan 2017 timeline

Discourse disclosed a bug submitted by skavans
Stored XSS in posts because of absence of oembed variables values escaping

20 Jan 2017 timeline

Legal Robot disclosed a bug submitted by mostafamamdoh2015
Validation bypass on user profile

20 Jan 2017 timeline

OLX disclosed a bug submitted by yappare
XSS on Meta Tag at https://m.olx.ph

20 Jan 2017 timeline

Brave Software disclosed a bug submitted by i1iii11iiiii111iii1
No user confirmation when an auto-updated extension gets more permissions

20 Jan 2017 timeline

Legal Robot disclosed a bug submitted by arnonymous
Missing restriction on string size in profile fields

20 Jan 2017 timeline

Badoo disclosed a bug submitted by alvares97
Leave inaccessible messaging system with a message (https://us1.badoo.com)

19 Jan 2017 timeline

LocalTapiola disclosed a bug submitted by whitehattushu
Disclosure of IBM Websphere page

19 Jan 2017 timeline

Urban Dictionary disclosed a bug submitted by ak1t4
Text injection on Auth problem at urbandictionary.com

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by muhammadkhizerjaved
http://digital.starbucks.com/ Creation of Google G Suite Account on Behalf of starbucks.

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by ddworken
Persistent XSS in www.starbucks.com

17 Jan 2017 timeline

Starbucks disclosed a bug submitted by yappare
Improper Validation on Cancel Link Redirect

17 Jan 2017 timeline

1 ... 338 339 340 341 342 ... 490

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.