The unofficial HackerOne disclosure Timeline

New Relic disclosed a bug submitted by geeknik
https://rpm.newrelic.com/.htaccess file is world readable

20 May 2016 timeline

New Relic disclosed a bug submitted by trabajoduro_2
Clickjacking on authenticated pages which is inscope for New Relic

20 May 2016 timeline

Xero disclosed a bug submitted by droope
Insecure Payment System Integration

20 May 2016 timeline

LocalTapiola disclosed a bug submitted by aaditya_purani

20 May 2016 timeline

Dovecot disclosed a bug submitted by hari-cybex
DIrectory Listing Found

20 May 2016 timeline

Informatica disclosed a bug submitted by psychomantis

19 May 2016 timeline

HackerOne disclosed a bug submitted by ala_arfaoui
HackerOne Important Emails Notification are sent in clear-text

19 May 2016 timeline

OpenSSL disclosed a bug submitted by jurajsomorovsky
Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)

19 May 2016 timeline

HackerOne disclosed a bug submitted by teo
LinkedIN URL should be HTTPS

18 May 2016 timeline

Phabricator disclosed a bug submitted by vorpal
Passphrase credential lock bypass

18 May 2016 timeline

PHP disclosed a bug submitted by cyberpunkych
Null pointer deref (segfault) in stream_context_get_default

17 May 2016 timeline

Coinbase disclosed a bug submitted by hisham
Email leak in transcations in Android app

17 May 2016 timeline

Dovecot disclosed a bug submitted by thalaivarsubu
nginx server vulnerable

17 May 2016 timeline

Veris disclosed a bug submitted by kanwar
Text injection can be used in phishing 404 page and should not include attacker text

17 May 2016 timeline

Sucuri disclosed a bug submitted by rj01
Manipulating of Sucuri.net (List Subscription) Emails (HTML/Script Injection)

16 May 2016 timeline

InVision disclosed a bug submitted by rootxflood
CRITICAL : Delete Boards Admin's ( or any other user ) comment. ( IDOR )

16 May 2016 timeline

Badoo disclosed a bug submitted by symbiansymoh
Badoo and Hotornot User Disclosure

16 May 2016 timeline

Paragon Initiative Enterprises disclosed a bug submitted by ahmedkhouja
Email Authentication Bypass

16 May 2016 timeline

Uber disclosed a bug submitted by jouko

Stored XSS in drive.uber.com WordPress admin panel

14 May 2016 timeline

LocalTapiola disclosed a bug submitted by billy_blaze
Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi

14 May 2016 timeline

1 ... 354 355 356 357 358 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.