The unofficial HackerOne disclosure Timeline

b'Twitter' disclosed a bug submitted by b'anshuman_pattnaik'
b'AppLovin API Key hardcoded in a Github repo'

18 Sep 2019 timeline

b'Shopify' disclosed a bug submitted by b'eissen5c'
b'Clickjacking in [exchangemarketplace.com]'

18 Sep 2019 timeline

b'VK.com' disclosed a bug submitted by b'linkks'
b'Information Disclosure (phpinfo())'

18 Sep 2019 timeline

b'VK.com' disclosed a bug submitted by b'linkks'
b'????? swag'

18 Sep 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'obayda'
b'Settings page in https://support.my.com is vulnerable to clickjacking'

18 Sep 2019 timeline

b'RSK' disclosed a bug submitted by b'ahook'
b'Attacker can add arbitrary data to the blockchain without paying gas'

18 Sep 2019 timeline

b'RSK' disclosed a bug submitted by b'z3t'
b'DoS through PeerExplorer'

18 Sep 2019 timeline

b'Valve' disclosed a bug submitted by b'nyancat0131'
b'Unchecked weapon id in WeaponList message parser on client leads to RCE'

17 Sep 2019 timeline

b'Valve' disclosed a bug submitted by b'nyancat0131'
b'Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution'

17 Sep 2019 timeline

b'Valve' disclosed a bug submitted by b'nyancat0131'
b'Malformed playlist.txt in GoldSrc games leads to Access Violation & arbitrary code execution'

17 Sep 2019 timeline

b'MyCrypto' disclosed a bug submitted by b'zeroxyele'
b'The twitter accounts are linked on page but unclaimed.'

17 Sep 2019 timeline

b'ICQ' disclosed a bug submitted by b'metnew'
b'ICQ for macOS: lack of `com.apple.quarantine` meta-attribute on downloaded files leads to GateKeeper/Quarantine bypass for downloaded executables'

17 Sep 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'elmahdi'
b'Xss Reflected On spgw.terrhq.ru [ url ]'

16 Sep 2019 timeline

b'Keybase' disclosed a bug submitted by b'metnew'
b'Keybase client: downloaded executables lack "com.apple.quarantine" meta-attribute [macOS]'

16 Sep 2019 timeline

b'WordPress' disclosed a bug submitted by b'flimm'
b'antispambot does not always escape <, >, &, " and \''

16 Sep 2019 timeline

16 Sep 2019 timeline

b'Shopify' disclosed a bug submitted by b'wxy7174'
b'?????? DOM XSS via Shopify.API.remoteRedirect'

15 Sep 2019 timeline

b'Slack' disclosed a bug submitted by b'metnew'
b'User-assisted RCE in Slack for macOS (from official site) due to improper quarantine meta-attribute handling for downloaded files'

14 Sep 2019 timeline

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'nitrozeus0x01'
b'.git file accessible'

13 Sep 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lightangel1412'
b'[http_server] Stored XSS in the filename when directories listing'

13 Sep 2019 timeline

1 ... 410 411 412 413 414 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.