The unofficial HackerOne disclosure Timeline

b'Ian Dunn' disclosed a bug submitted by b'damn007'
b'Potential Open-Redirection'

27 Dec 2019 timeline

b'Stripo Inc' disclosed a bug submitted by b'trazer'
b'stripo.email reflected xss'

26 Dec 2019 timeline

b'Zomato' disclosed a bug submitted by b'joker7889'
b'Free food bug done by burp suite'

26 Dec 2019 timeline

b'Twitter' disclosed a bug submitted by b's3c'
b'CRLF injection'

25 Dec 2019 timeline

b'Genasys Technologies' disclosed a bug submitted by b'aaron_costello'
b'Ability to bypass social OAuth and take over any account [d2c-api]'

24 Dec 2019 timeline

b'Keybase' disclosed a bug submitted by b'aaron_costello'
b'SOP bypass using browser cache'

24 Dec 2019 timeline

b'Shopify' disclosed a bug submitted by b'mosuan'
b'Stored XSS in Shopify Chat '

23 Dec 2019 timeline

b'Stripo Inc' disclosed a bug submitted by b'haxorpunk'
b'subdomain takeover at status0.stripo.email'

23 Dec 2019 timeline

b'Stripo Inc' disclosed a bug submitted by b'prateek_thakare'
b'No length on password'

23 Dec 2019 timeline

b'Moneybird' disclosed a bug submitted by b'osama-hamad'
b'Bypass password reset rate limit protection at moneybird.com/passwords'

22 Dec 2019 timeline

b'ZEIT' disclosed a bug submitted by b'luied1920'
b'Open Redirect on Gitllab Oauth leading to Acount Takeover'

22 Dec 2019 timeline

b'Badoo' disclosed a bug submitted by b'matthijsmelissen'
b'SSO through odnoklassniki uses http rather than https'

21 Dec 2019 timeline

b'HackerOne' disclosed a bug submitted by b'the_arch_angel'
b'How the Bug stole hacking'

20 Dec 2019 timeline

b'GitLab' disclosed a bug submitted by b'ryhmnlfj'
b'Uncontrolled Resource Consumption in any Markdown field using Mermaid'

20 Dec 2019 timeline

b'YouPorn' disclosed a bug submitted by b'n00bsec'
b'XSS reflected on [https://www.youporn.com]'

19 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'simonscannell'
b'Authenticated Code Execution through Phar deserialization in CSV Importer as Shop manager in WooCommerce'

19 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'simonscannell'
b"WooCommerce Blacklist in 'map_meta_cap' leads to Privilege Escalation of Shopmanagers"

19 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'simonscannell'
b"Stored XSS in Jetpack's Simple Payment Module by Contributors / Authors"

19 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'simonscannell'
b'Arbitrary File Download as Shopmanager'

19 Dec 2019 timeline

b'Stripo Inc' disclosed a bug submitted by b'aishkendle'
b'Password token leak via Host header'

19 Dec 2019 timeline

1 ... 373 374 375 376 377 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.