The unofficial HackerOne disclosure Timeline

b'Rocket.Chat' disclosed a bug submitted by b'sanjogpanda'
b'Slack Token exposed over internet (Github)'

11 Jul 2019 timeline

b'Dropbox' disclosed a bug submitted by b'hanno'
b'Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack'

10 Jul 2019 timeline

b'VHX' disclosed a bug submitted by b'sp1d3rs'
b'Possibility to overwrite any file in the vpe.cdn.vimeo.tv leads to the Stored XSS for the all customers on the embed.vhx.tv'

10 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'lewerkun'
b'Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080'

10 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'0xradi'
b'Ability To Takeover any account by Emaill.'

10 Jul 2019 timeline

b'Unikrn' disclosed a bug submitted by b'xb00ck'
b'multiple vulnerabilities on your mautic server'

10 Jul 2019 timeline

10 Jul 2019 timeline

b'Twitter' disclosed a bug submitted by b'eo420'
b'Twitter Periscope Clickjacking Vulnerability'

10 Jul 2019 timeline

b'Razer US' disclosed a bug submitted by b'johnkor'
b'Razer Synapse 3 Chromasdk.io Root CA with Private Key Re-use'

09 Jul 2019 timeline

b'Monero' disclosed a bug submitted by b'keejef'
b'Locked_Transfer functional burning'

09 Jul 2019 timeline

b'Weblate' disclosed a bug submitted by b'xalerafera'
b'HTML injection and information disclosure in support panel'

09 Jul 2019 timeline

b'Weblate' disclosed a bug submitted by b'an1sor0pous11'
b'Stored XSS via Create Project (Add new translation project)'

09 Jul 2019 timeline

b'New Relic' disclosed a bug submitted by b'albinowax'
b'Users can enable API access for free via mass assignment'

08 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'xalerafera'
b'XSS ??? ???????? ??????????? ?? [games.mail.ru]'

08 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'xalerafera'
b'CSRF ?? ???????? ??????? ?? [games.mail.ru]'

08 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'funt0m'
b'self XSS ?? ???????? https://aw.mail.ru/pin/'

08 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'0xc0ffee'
b'Path traversal, SSTI and RCE on a MailRu acquisition '

08 Jul 2019 timeline

b'QIWI' disclosed a bug submitted by b'lincoln9932'
b'????? ???????? ?? ????????'

08 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'pikky'
b'Stored XSS in email'

07 Jul 2019 timeline

b'Upserve ' disclosed a bug submitted by b'fuzz'
b'OLO Total price manipulation using negative quantities'

06 Jul 2019 timeline

1 ... 422 423 424 425 426 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.