The unofficial HackerOne disclosure Timeline

b'Uber' disclosed a bug submitted by b'eequalsmc2'
b'Lack of proper paymentProfileUUID validation allows any number of free rides without any outstanding balance'

18 Jul 2019 timeline

b'Chainlink' disclosed a bug submitted by b'jaisharma'
b'Testnet address being sent in cleartext as http://rinkeby.chain.link/ is missing SSL certificate'

17 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'klmunday'
b'Stored XSS in Rich editor via Embed datetime'

17 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'klmunday'
b'Stored XSS in Profile Comments'

17 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'klmunday'
b'Stored XSS in embedded posts containing images'

17 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'klmunday'
b'Hidden Stored XSS in nested post embeds'

17 Jul 2019 timeline

b'GitLab' disclosed a bug submitted by b'nyangawa'
b'Local files could be overwritten in GitLab, leading to remote command execution'

17 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'sicarius'
b'Wrong link on corne.maximum.nl'

16 Jul 2019 timeline

b'Ian Dunn' disclosed a bug submitted by b'littlegeek'
b'xmlrpc.php FILE IS enable on Main website'

16 Jul 2019 timeline

b'Grammarly' disclosed a bug submitted by b'metnew'
b'`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension'

15 Jul 2019 timeline

b'Shopify' disclosed a bug submitted by b'modam3r5'
b'any staff members have the ability to comment in [discounts] he/she can disable comment section it to other staff even the admin of the store'

15 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'alb3r7'
b'Unsanitized user photo paths allow local file read'

13 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'alb3r7'
b'Stored XSS in vanilla'

13 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'page1337'
b'Sql-inj in https://maximum.com/ajax/people'

12 Jul 2019 timeline

b'Informatica' disclosed a bug submitted by b'modam3r5'
b'[https://life.informatica.com] - information disclose '

12 Jul 2019 timeline

b'Smule' disclosed a bug submitted by b'dhakalananda'
b'Missing Rate Limit in Password Change'

12 Jul 2019 timeline

b'VK.com' disclosed a bug submitted by b'cheatboss'
b'??????????? ?????? ? ???????? ???? ?? ?????? ???? ?? ??? ????? ?? ???????.'

11 Jul 2019 timeline

b'VK.com' disclosed a bug submitted by b'cheatboss'
b'???????? ????? ?????? ?? ?? ????.'

11 Jul 2019 timeline

b'HackerOne' disclosed a bug submitted by b'neema'
b'View HackerOne challenge scope before challenge begins'

11 Jul 2019 timeline

b'Tube8' disclosed a bug submitted by b'sp1d3rs'
b'Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)'

11 Jul 2019 timeline

1 ... 421 422 423 424 425 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.