The unofficial HackerOne disclosure Timeline

Binary.com disclosed a bug submitted by blinkms
Cookie bug

16 Dec 2015 timeline

Shopify disclosed a bug submitted by batman
Open Redirect at *.myshopify.com/account/login?checkout_url=

16 Dec 2015 timeline

Coinbase disclosed a bug submitted by sick-sec
XXE in OAuth2 Applications gallery profile App logo

16 Dec 2015 timeline

Phabricator disclosed a bug submitted by fnqgpc
libphutil: removing bytes from a PhutilRope does not work as intended

16 Dec 2015 timeline

Khan Academy disclosed a bug submitted by red4killeer
Html injection on khanacademy

14 Dec 2015 timeline

Shopify disclosed a bug submitted by rms
An administrator without any permission is able to get order notifications using his APNS Token.

14 Dec 2015 timeline

Shopify disclosed a bug submitted by blinkms
Open redirect using theme install

14 Dec 2015 timeline

Shopify disclosed a bug submitted by reactors08
shopifyapps.com XSS on sales channels via currency formatting

14 Dec 2015 timeline

Sucuri disclosed a bug submitted by blinkms
XSS Vuln in Sucuri Security - Auditing, Malware Scanner

13 Dec 2015 timeline

Mail.Ru disclosed a bug submitted by c37hun
?????????? ???? PHP ????? FastCGI

11 Dec 2015 timeline

Mail.Ru disclosed a bug submitted by c37hun
??????????? ?? ????? ?????? ???????????? parapa.mail.ru

11 Dec 2015 timeline

Mail.Ru disclosed a bug submitted by c37hun
Flash XSS ?? old.corp.mail.ru

11 Dec 2015 timeline

Mail.Ru disclosed a bug submitted by smitgajra007
Cross site scripting

11 Dec 2015 timeline

Mail.Ru disclosed a bug submitted by mak
Reflective Xss on news.mail.ru and admin.news.mail.ru

11 Dec 2015 timeline

QIWI disclosed a bug submitted by hassham
XSS Reflected in test.qiwi.ru

11 Dec 2015 timeline

Coinbase disclosed a bug submitted by shahmeer-amir
Transactions visible on Unconfirmed devices

11 Dec 2015 timeline

WePay disclosed a bug submitted by harry_mg
Subdomain Takeover in http://staging.wepay.com/ pointing to Fastly

10 Dec 2015 timeline

Zendesk disclosed a bug submitted by mdv
Cross-site Scripting https://www.zendesk.com/product/pricing/

09 Dec 2015 timeline

Imgur disclosed a bug submitted by dipak_das
Open Url redirection on login with facebook

09 Dec 2015 timeline

Imgur disclosed a bug submitted by protector_47_four
Content Sniffing not enabled

09 Dec 2015 timeline

1 ... 345 346 347 348 349 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.