The unofficial HackerOne disclosure Timeline

PHP disclosed a bug submitted by andreapalazzo
curl_setopt_array() type confusion

04 Aug 2015 timeline

PHP disclosed a bug submitted by dimitri
Arbitrary code execution in str_ireplace function

04 Aug 2015 timeline

PHP disclosed a bug submitted by haquaman
Mem out-of-bounds write (segfault) in ZEND_ASSIGN_DIV_SPEC_CV_UNUSED_HANDLER

02 Aug 2015 timeline

PHP disclosed a bug submitted by haquaman
null pointer deref (segfault) in zend_eval_const_expr

02 Aug 2015 timeline

Informatica disclosed a bug submitted by ddworken
XSS in Search Communities Function

31 Jul 2015 timeline

Marktplaats disclosed a bug submitted by vathsa
Content Spoofing - http://aanbieding.marktplaats.nl/wp-admin/admin-ajax.php

31 Jul 2015 timeline

Flox disclosed a bug submitted by anonymous_anon
Email spoofing configuration missing

27 Jul 2015 timeline

wont-fix

MapLogin disclosed a bug submitted by arun_agr
Account creation code bypass

25 Jul 2015 timeline

Python disclosed a bug submitted by johnleitch
array.fromstring Use After Free

25 Jul 2015 timeline

Square disclosed a bug submitted by jmoore15
Delayed, fraudulent transactions possible with encrypted Square Reader devices due to lack of server-side verification of device transaction counter

24 Jul 2015 timeline

Shopify disclosed a bug submitted by nismo
Bulk Discount App in myshopify.com exposes http://bulkdiscounts.shopifyapps.com vulnerable to XSS

23 Jul 2015 timeline

Marktplaats disclosed a bug submitted by bugs3ra
Secret Password reset key disclosed to third party site via referer in header

23 Jul 2015 timeline

Marktplaats disclosed a bug submitted by bugs3ra
Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

23 Jul 2015 timeline

WordPoints disclosed a bug submitted by ru94mb
Weak Cryptographic Hash

23 Jul 2015 timeline

Dropbox disclosed a bug submitted by mafia
Get email ID of any user on hackpad.com

22 Jul 2015 timeline

Zaption disclosed a bug submitted by sobolev
Cheating at gallery rating

22 Jul 2015 timeline

Keybase disclosed a bug submitted by wesecureapp
Stealing CSRF Tokens

22 Jul 2015 timeline

HackerOne disclosed a bug submitted by pranav_hivarekar

21 Jul 2015 timeline

wont-fix

Shopify disclosed a bug submitted by nismo
XSS in Myshopify Admin Site in DISCOUNTS

20 Jul 2015 timeline

VK.com disclosed a bug submitted by vladislav805
API: Bug in method auth.validatePhone

17 Jul 2015 timeline

1 ... 350 351 352 353 354 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.