The unofficial HackerOne disclosure Timeline

b'Twitter' disclosed a bug submitted by b'slickrockweb'
b'Viral Direct Message Clickjacking via link truncation leading to capture of both Google credentials & installation of malicious 3rd party Twitter App'

31 Oct 2019 timeline

b'Rocket.Chat' disclosed a bug submitted by b'w2w'
b'Open redirect open.rocket.chat/file-upload/ID/filename.svg'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'wddx_deserialize allows illegal memory access'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'wddx_deserialize null dereference'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'pass2_no_dither out-of-bounds access'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'gdImageTrueColorToPaletteBody allows arbitrary write/read access'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'select_colors write out-of-bounds'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'imap_rfc822_parse_headers GS Violation'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'Illegal write/read access caused by gdImageAALine overflow'

31 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'fms'
b'imagescale out-of-bounds read'

31 Oct 2019 timeline

b'Grammarly' disclosed a bug submitted by b'orlserg'
b'Lack of CSRF header validation at https://g-mail.grammarly.com/profile'

31 Oct 2019 timeline

b'Vend' disclosed a bug submitted by b'z0idex'
b'Open Redirect in the Path of vendhq.com'

31 Oct 2019 timeline

b'Central Security Project' disclosed a bug submitted by b'hland'
b'Unrestricted File Upload Leading to Remote Code Execution'

30 Oct 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'maxarr'
b'touch.mail.ru / e.mail.ru memory content disclosure'

30 Oct 2019 timeline

b'Central Security Project' disclosed a bug submitted by b'badcode_'
b'OS Command Injection in Nexus Repository Manager 2.x(bypass CVE-2019-5475)'

29 Oct 2019 timeline

b'Razer' disclosed a bug submitted by b'smalien'
b'Unauthenticated access to sensitive user information'

29 Oct 2019 timeline

b'Kartpay' disclosed a bug submitted by b'nitrozeus'
b'Referer issue in Kartpay.com'

28 Oct 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'secator'
b'[XSS] postMessage ? jsapi/button'

28 Oct 2019 timeline

b'Weblate' disclosed a bug submitted by b'fr0nk'
b'no captcha for register user and weak question attacker can spam email'

26 Oct 2019 timeline

b'Zendesk' disclosed a bug submitted by b'geeknik'
b'SMTP user enumeration via mail.zendesk.com'

25 Oct 2019 timeline

1 ... 397 398 399 400 401 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.