The unofficial HackerOne disclosure Timeline

b'OWOX, Inc.' disclosed a bug submitted by b'mohummad_saqib_arif'
b'Session is not expire after logout'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b"Ability to verify any email address you don't own - accounts.shopify.com"

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'Removed staff members who had "Manage shops" permission can still create development stores'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'H1514 Stored XSS in Return Magic App portal content'

08 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'mosuan'
b'Stored XSS in private message'

08 Nov 2019 timeline

b'Apache httpd (IBB)' disclosed a bug submitted by b'ccppuu'
b'mod_remoteip stack buffer overflow and NULL pointer dereference'

07 Nov 2019 timeline

b'Razer' disclosed a bug submitted by b'anshuman_pattnaik'
b'2FA doesn\'t work in "https://insider.razer.com"'

07 Nov 2019 timeline

b'Grammarly' disclosed a bug submitted by b'foobar7'
b'Permissive CORS policy trusting arbitrary extensions origin'

06 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'ehsahil'
b"Shopify's SF and LA offices Dashboard Information disclosed via Public Gist"

06 Nov 2019 timeline

b'Liberapay' disclosed a bug submitted by b'magic_spell'
b'Private target account appears in search results'

06 Nov 2019 timeline

b'Twitter' disclosed a bug submitted by b'suyog'
b'Access MoPub Reports Data even after Company removed you from their MoPub Account.'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'[qiwi.me] No limits on image download requests'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'Nickname disclosure through web-chat'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'https://teamplay.qiwi.com/ ???????? ?????? => ?????????? ?????? ??? ????????'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'????? ???????? ??? ?????? ??????'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'????? ???????? ?? ????????'

05 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'?????-?? ??????? ??????? ????? ?????? ? ???? ?? ??????? https://qiwi.me/undefined'

05 Nov 2019 timeline

b'Liberapay' disclosed a bug submitted by b'nikhil786'
b'Invalidate session after password reset'

05 Nov 2019 timeline

b'Shopify' disclosed a bug submitted by b'rijalrojan'
b'H1514 Extract information about other sites (new sites) through Affiliate/Referral pages'

04 Nov 2019 timeline

1 ... 395 396 397 398 399 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.