The unofficial HackerOne disclosure Timeline

Shopify disclosed a bug submitted by wesecureapp
Attach Pinterest account - no State/CSRF parameter in Oauth Call back

01 Feb 2016 timeline

Shopify disclosed a bug submitted by reactors08
www.shopify.com XSS via third-party script

01 Feb 2016 timeline

Shopify disclosed a bug submitted by heracles
Full access to Amazon S3 bucket containing AWS CloudTrail logs

01 Feb 2016 timeline

Mail.Ru disclosed a bug submitted by konqi
[afisha.mail.ru] SQL Injection

01 Feb 2016 timeline

ownCloud disclosed a bug submitted by ashesh
s2.owncloud.com: SSL Session cookie without secure flag set

27 Jan 2016 timeline

ownCloud disclosed a bug submitted by d0znpp
XXE at host vpn.owncloud.com

27 Jan 2016 timeline

HackerOne disclosed a bug submitted by 00day
Team Member(s) associated with a Group have Read-only permission (Post internal comments) can post comment to all the participants

27 Jan 2016 timeline

Mail.Ru disclosed a bug submitted by harry_mg
Multiple vulnerabilities in mail.ru subdomains

27 Jan 2016 timeline

HackerOne disclosed a bug submitted by intidc
HTML injection can lead to data theft

26 Jan 2016 timeline

Twitter disclosed a bug submitted by wesecureapp
IDOR- Activate Mopub on different organizations- steal api token- Fabric.io

25 Jan 2016 timeline

Square Open Source disclosed a bug submitted by bburky
git-fastclone allows arbitrary command execution through usage of ext remote URLs in submodules

25 Jan 2016 timeline

Square Open Source disclosed a bug submitted by bburky
Unsafe usage of Ruby string interpolation enabling command injection in git-fastclone

25 Jan 2016 timeline

ownCloud disclosed a bug submitted by haiderkamal
owncloud.help: Text Injection

23 Jan 2016 timeline

Imgur disclosed a bug submitted by charfee
XSS m.imgur.com

21 Jan 2016 timeline

withinsecurity disclosed a bug submitted by prashanth
content injection

21 Jan 2016 timeline

Imgur disclosed a bug submitted by charfee
XSS in imgur mobile 3

21 Jan 2016 timeline

Imgur disclosed a bug submitted by benmassaoud
Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.com

21 Jan 2016 timeline

Coinbase disclosed a bug submitted by datokaa
Big Bug with Vault which i have already reported: Case #606962

20 Jan 2016 timeline

PHP disclosed a bug submitted by libnex
Use After Free in sortWithSortKeys()

20 Jan 2016 timeline

withinsecurity disclosed a bug submitted by deepaktest30
Content Spoofing OR Text Injection in https://withinsecurity.com

20 Jan 2016 timeline

1 ... 344 345 346 347 348 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.