The unofficial HackerOne disclosure Timeline

QIWI disclosed a bug submitted by pradeepch99
Session Cookie without HttpOnly and secure flag set

27 Sep 2015 timeline

Python disclosed a bug submitted by hugbounter
Integer overflow in _Unpickler_Read

26 Sep 2015 timeline

Udemy disclosed a bug submitted by decay
Extremely high Course rating values could be set in order to make really high Average rating of the course. Negative values could be set to.

25 Sep 2015 timeline

HackerOne disclosed a bug submitted by ericr
Minor Bug: Public un-compiled CSS with original sass, versioning, source map, comments, etc.

25 Sep 2015 timeline

Shopify disclosed a bug submitted by dvl
Notification request disclose private information about other myshopify accounts

24 Sep 2015 timeline

Gratipay disclosed a bug submitted by ashesh
DKIM records not present, Email Hijacking is possible

23 Sep 2015 timeline

HackerOne disclosed a bug submitted by appsec3
CSV Injection with the CVS export feature

21 Sep 2015 timeline

Twitter disclosed a bug submitted by isox
POODLE Bug: 199.16.156.44, 199.16.156.108, mx4.twitter.com

20 Sep 2015 timeline

Automattic disclosed a bug submitted by maverickrocky02
Verification code issues for Two-Step Authentication

20 Sep 2015 timeline

Shopify disclosed a bug submitted by pouya

Bypass access restrictions from API

18 Sep 2015 timeline

HackerOne disclosed a bug submitted by josephjose_96
Weak HSTS age in support hackerone site

18 Sep 2015 timeline

Shopify disclosed a bug submitted by frozen
Invitation issue

16 Sep 2015 timeline

Urban Dictionary disclosed a bug submitted by psychomantis

16 Sep 2015 timeline

ownCloud disclosed a bug submitted by 1n3
owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

16 Sep 2015 timeline

ownCloud disclosed a bug submitted by ashesh
apps.owncloud.com: SSL Session cookie without secure flag set

15 Sep 2015 timeline

Mail.Ru disclosed a bug submitted by isox
auth.mail.ru: XSS in login form

13 Sep 2015 timeline

Mail.Ru disclosed a bug submitted by isox
api.video.mail.ru: XSS

13 Sep 2015 timeline

Mail.Ru disclosed a bug submitted by isox
files.mail.ru: XSS

13 Sep 2015 timeline

Mail.Ru disclosed a bug submitted by isox
touch.afisha.mail.ru: XSS

13 Sep 2015 timeline

Mail.Ru disclosed a bug submitted by isox
https://217.69.135.63/rb/: money.mail.ru sources disclosure

13 Sep 2015 timeline

1 ... 343 344 345 346 347 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.