The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'ahpaleus'
b'Username Enumeration'

11 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'bibek1'
b'Clickjacking on https://download.nextcloud.com'

11 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'j4tayu'
b'Clickjacking on https://nextcloud.com/'

11 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'j4tayu'
b'Clickjacking on https://download.nextcloud.com/'

11 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'j4tayu'
b'WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (UNAUTHORIZED)'

11 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'jarmouz'
b'XSS On Nextcloud Integrated with zimbra drive'

11 Nov 2019 timeline

b'YouPorn' disclosed a bug submitted by b'zerody'
b'IDOR allows any user to edit others videos'

11 Nov 2019 timeline

b'HackerOne' disclosed a bug submitted by b'ayid'
b'latest_activity_id and latest_activity_at may disclose information about internal activities to unauthorized users'

10 Nov 2019 timeline

b'Slack' disclosed a bug submitted by b'fletchto99'
b'CSS Injection to disable app & potential message exfil'

09 Nov 2019 timeline

b'HackerOne' disclosed a bug submitted by b'nathand'
b'Searching from Hacktivity returns hits for words in limited disclosure reports that are not visible'

08 Nov 2019 timeline

b'Ubiquiti Inc.' disclosed a bug submitted by b'b0yd'
b'Privilege Escalation From user to SYSTEM via unauthenticated command execution '

08 Nov 2019 timeline

b'OWOX, Inc.' disclosed a bug submitted by b'mohummad_saqib_arif'
b'Session is not expire after logout'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b"Ability to verify any email address you don't own - accounts.shopify.com"

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'Removed staff members who had "Manage shops" permission can still create development stores'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'H1514 Stored XSS in Return Magic App portal content'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'mosuan'
b'Stored XSS in private message'

08 Nov 2019 timeline

b'Apache httpd (IBB)' disclosed a bug submitted by b'ccppuu'
b'mod_remoteip stack buffer overflow and NULL pointer dereference'

07 Nov 2019 timeline

b'Razer' disclosed a bug submitted by b'anshuman_pattnaik'
b'2FA doesn\'t work in "https://insider.razer.com"'

07 Nov 2019 timeline

b'Grammarly' disclosed a bug submitted by b'foobar7'
b'Permissive CORS policy trusting arbitrary extensions origin'

06 Nov 2019 timeline

1 ... 390 391 392 393 394 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.