The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'heeeeen'
b"Possible to Upload Local Arbitrary Private File to the Cloud against User's Will"

06 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'heeeeen'
b'Path Traversal When Sharing with Cloud Mail.Ru App via a file with Crated Name'

06 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'heeeeen'
b'Launch Any Activity in MyMail App'

06 Jul 2019 timeline

b'ICQ' disclosed a bug submitted by b'shafigullin'
b'XSS web.icq.com double linkify'

06 Jul 2019 timeline

b'ICQ' disclosed a bug submitted by b'shell_c0de'
b'?????? ????????? ?????? ??????????: ?????? ??? ???????????, ????, ??, ?????? ?????????'

06 Jul 2019 timeline

b'ICQ' disclosed a bug submitted by b'cybercdh'
b'ICQ Windows Application is Vulnerable to DLL Search Order Hijacking'

06 Jul 2019 timeline

b'ICQ' disclosed a bug submitted by b'jplopezy'
b'FLV FILE FORMAT (AUDIOSES.DLL) Out of Bounds'

06 Jul 2019 timeline

b'Automattic' disclosed a bug submitted by b'ksapphire'
b'Gaining unlimited bonus points on websites with WooCommerce Points and Rewards'

05 Jul 2019 timeline

b'Shopify' disclosed a bug submitted by b'ngalog'
b'[Privilege Escalation] Shopify Admin -- Permission from Settings to Customer'

05 Jul 2019 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Custom Field Attributes may be created and updated for customers with Custom Field Trial enabled'

05 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'SSRF in VCARD photo upload functionality'

05 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'SSRF in /appsuite/api/autoconfig '

05 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'SSRF - RSS feed, blacklist bypass (301 re-direct)'

05 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'SSRF - Blacklist bypass for mail account addition'

05 Jul 2019 timeline

b'VK.com' disclosed a bug submitted by b'povargek'
b'??????? 2FA ?/??? ???????? access_token, ???? ?? ?????-???? ???? ?? ???????? ??????'

04 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b's1ck-sec'
b'Stored XSS in Email attachment file name'

04 Jul 2019 timeline

b'Shopify' disclosed a bug submitted by b'pklfpklf'
b'HTML injection in https://interviewing.shopify.com/index.php?candidate='

04 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'SSRF - RSS feed, blacklist bypass (IP Formatting)'

04 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'logan5'
b'IDOR - setAttribute action of user object in API'

04 Jul 2019 timeline

b'OX App Suite' disclosed a bug submitted by b'ranjit_p'
b'IDOR to view other user folder name'

04 Jul 2019 timeline

1 ... 423 424 425 426 427 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.