The unofficial HackerOne disclosure Timeline

b'Central Security Project' disclosed a bug submitted by b'cbagdude'
b'OS Command Injection in Nexus Repository Manager 2.x'

20 Aug 2019 timeline

b'WakaTime' disclosed a bug submitted by b'tkd8'
b'bypass csrftoken at profile name.'

20 Aug 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'inkz'
b'[larvitbase-api] Unintended Require'

20 Aug 2019 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'rooghz'
b'xmlrpc.php file enabled - data.gov'

19 Aug 2019 timeline

b'Grammarly' disclosed a bug submitted by b'brdoors3'
b'Previously created sessions continue being valid after MFA activation'

19 Aug 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'funt0m'
b'Full Path Disclosure'

19 Aug 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'theappsec'
b'[e.mail.ru] Stored xss in Mpop cookie'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'SQL Injection in ????'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'SQL Injection in ????'

19 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2'
b'Trace.axd page leaks sensitive information'

19 Aug 2019 timeline

b'SEMrush' disclosed a bug submitted by b'artemis233'
b'SSRF In Get Video Contents'

19 Aug 2019 timeline

b'Informatica' disclosed a bug submitted by b'e3xpl0it'
b'[kb.informatica.com] Dom Based xss'

17 Aug 2019 timeline

b'Node.js' disclosed a bug submitted by b'jasnell'
b'Multiple HTTP/2 DOS Issues'

16 Aug 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'secator'
b'[XSS] RSS Feed Widget'

16 Aug 2019 timeline

b'Zomato' disclosed a bug submitted by b'sjvino'
b'Able to manipulate order amount by removing cancellation amount and cause financial impact'

16 Aug 2019 timeline

b'Twitter' disclosed a bug submitted by b'muhammad139'
b'Github Token Leaked publicly for https://github.com/mopub'

15 Aug 2019 timeline

b'Starbucks' disclosed a bug submitted by b'mindtrick'
b'Subdomain takeover of d02-1-ag.productioncontroller.starbucks.com'

15 Aug 2019 timeline

b'Grammarly' disclosed a bug submitted by b'chackmate'
b'Can register any mobile number in MFA without current code.'

15 Aug 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rootaccess'
b'SQL Injection vulnerability located at ????????'

15 Aug 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'tbehroz'
b'Stored XSS '

15 Aug 2019 timeline

1 ... 417 418 419 420 421 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.