The unofficial HackerOne disclosure Timeline

b'Node.js third-party modules' disclosed a bug submitted by b'toannc123'
b'[statichttpserver] List any file in the folder by using path traversal.'

25 Aug 2019 timeline

b'Khan Academy' disclosed a bug submitted by b'katsuragicsl'
b'Subdomain takeover on healthyhackathon.khanacademy.org and hackweek.khanacademy.org'

25 Aug 2019 timeline

b'ICQ' disclosed a bug submitted by b'superboyxxx'
b'web.icq.com XSS in chat message via contact info'

24 Aug 2019 timeline

b'Vimeo' disclosed a bug submitted by b'dphoeniixx'
b'Reflected File Download (RFD) in download video'

23 Aug 2019 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'smartnoob'
b'Catch mails sent to an SMTP Server over SSL using an Evil SMTP Server'

22 Aug 2019 timeline

b'Equifax' disclosed a bug submitted by b'mohanaddobal'
b'Important information leaked on Github'

22 Aug 2019 timeline

b'GitLab' disclosed a bug submitted by b'8ayac'
b'All functions that allow users to specify color code are vulnerable to ReDoS'

21 Aug 2019 timeline

b'Trustpilot' disclosed a bug submitted by b'qwerty01'
b'IDOR in sending support email upon Verifying user business domain'

21 Aug 2019 timeline

b'OLX' disclosed a bug submitted by b'nullcod3r'
b'SQL Injection on https://www.olx.co.id'

20 Aug 2019 timeline

b'Central Security Project' disclosed a bug submitted by b'cbagdude'
b'OS Command Injection in Nexus Repository Manager 2.x'

20 Aug 2019 timeline

b'WakaTime' disclosed a bug submitted by b'tkd8'
b'bypass csrftoken at profile name.'

20 Aug 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'inkz'
b'[larvitbase-api] Unintended Require'

20 Aug 2019 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'rooghz'
b'xmlrpc.php file enabled - data.gov'

19 Aug 2019 timeline

b'Grammarly' disclosed a bug submitted by b'brdoors3'
b'Previously created sessions continue being valid after MFA activation'

19 Aug 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'funt0m'
b'Full Path Disclosure'

19 Aug 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'theappsec'
b'[e.mail.ru] Stored xss in Mpop cookie'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'SQL Injection in ????'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'SQL Injection in ????'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'Trace.axd page leaks sensitive information'

19 Aug 2019 timeline

b'SEMrush' disclosed a bug submitted by b'artemis233'
b'SSRF In Get Video Contents'

19 Aug 2019 timeline

1 ... 412 413 414 415 416 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.