The unofficial HackerOne disclosure Timeline

b'Ian Dunn' disclosed a bug submitted by b'littlegeek'
b'xmlrpc.php FILE IS enable on Main website'

16 Jul 2019 timeline

b'Grammarly' disclosed a bug submitted by b'metnew'
b'`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension'

15 Jul 2019 timeline

b'Shopify' disclosed a bug submitted by b'modam3r5'
b'any staff members have the ability to comment in [discounts] he/she can disable comment section it to other staff even the admin of the store'

15 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'alb3r7'
b'Unsanitized user photo paths allow local file read'

13 Jul 2019 timeline

b'Vanilla' disclosed a bug submitted by b'alb3r7'
b'Stored XSS in vanilla'

13 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'page1337'
b'Sql-inj in https://maximum.com/ajax/people'

12 Jul 2019 timeline

b'Informatica' disclosed a bug submitted by b'modam3r5'
b'[https://life.informatica.com] - information disclose '

12 Jul 2019 timeline

b'Smule' disclosed a bug submitted by b'dhakalananda'
b'Missing Rate Limit in Password Change'

12 Jul 2019 timeline

b'VK.com' disclosed a bug submitted by b'cheatboss'
b'??????????? ?????? ? ???????? ???? ?? ?????? ???? ?? ??? ????? ?? ???????.'

11 Jul 2019 timeline

b'VK.com' disclosed a bug submitted by b'cheatboss'
b'???????? ????? ?????? ?? ?? ????.'

11 Jul 2019 timeline

b'HackerOne' disclosed a bug submitted by b'neema'
b'View HackerOne challenge scope before challenge begins'

11 Jul 2019 timeline

b'Tube8' disclosed a bug submitted by b'sp1d3rs'
b'Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)'

11 Jul 2019 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sanjogpanda'
b'Slack Token exposed over internet (Github)'

11 Jul 2019 timeline

b'Dropbox' disclosed a bug submitted by b'hanno'
b'Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack'

10 Jul 2019 timeline

b'VHX' disclosed a bug submitted by b'sp1d3rs'
b'Possibility to overwrite any file in the vpe.cdn.vimeo.tv leads to the Stored XSS for the all customers on the embed.vhx.tv'

10 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'lewerkun'
b'Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080'

10 Jul 2019 timeline

b'Maximum' disclosed a bug submitted by b'0xradi'
b'Ability To Takeover any account by Emaill.'

10 Jul 2019 timeline

b'Unikrn' disclosed a bug submitted by b'xb00ck'
b'multiple vulnerabilities on your mautic server'

10 Jul 2019 timeline

10 Jul 2019 timeline

b'Twitter' disclosed a bug submitted by b'eo420'
b'Twitter Periscope Clickjacking Vulnerability'

10 Jul 2019 timeline

1 ... 425 426 427 428 429 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.