The unofficial HackerOne disclosure Timeline

b'Midpoint (European Commission ' disclosed a bug submitted by b'princenullbite'
b'Attacker can read password from log data'

15 Jun 2019 timeline

b'Shopify' disclosed a bug submitted by b'encryptsaan123'
b'XSS on services.shopify.com'

14 Jun 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'H1514 Removed Staff members who had "Apps" permission can still modify flow app connections'

14 Jun 2019 timeline

b'Twitter' disclosed a bug submitted by b'updatelap'
b'IDOR and statistics leakage in Orders '

14 Jun 2019 timeline

b'GitLab' disclosed a bug submitted by b'paresh_parmar'
b'information disclosure of secret_key_base via encoding charcters'

13 Jun 2019 timeline

b'TomTom' disclosed a bug submitted by b'abzi'
b"CSRF allows attacker to manage customer's shopping cart."

13 Jun 2019 timeline

b'TomTom' disclosed a bug submitted by b'omnicient'
b'Reflected Cross Site Scripting vuln in tomtom.com'

13 Jun 2019 timeline

b'TomTom' disclosed a bug submitted by b'z3xddd'
b'XSS Reflect'

13 Jun 2019 timeline

b'TomTom' disclosed a bug submitted by b'schopathx'
b'Reflected XSS on www.tomtom.com'

13 Jun 2019 timeline

b'Pornhub' disclosed a bug submitted by b'linkks'
b'xss'

12 Jun 2019 timeline

b'Starbucks' disclosed a bug submitted by b'linkks'
b'PHPinfo page'

12 Jun 2019 timeline

b'Unikrn' disclosed a bug submitted by b'professormoriart'
b'Email abuse and Referral Abuse'

12 Jun 2019 timeline

b'Unikrn' disclosed a bug submitted by b'rbcafe'
b'[unikrn.com] Profile updated with error":true,"success":false"'

12 Jun 2019 timeline

b'VLC (European Commission - DIG' disclosed a bug submitted by b'retoor'
b'Buffer overflow in libavi_plugin memmove() call'

12 Jun 2019 timeline

b'Shopify' disclosed a bug submitted by b'h13-'
b'Unpublished Product Images can be disclosed'

12 Jun 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'heeeeen'
b'Stealing Arbitrary Private Files of MyMail App '

11 Jun 2019 timeline

b'VK.com' disclosed a bug submitted by b'ilyamodder'
b'????????? ?? ???? ?? Android-?????????? ????? ????????? ??????????'

11 Jun 2019 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'jlleitschuh'
b'Build fetches jars over HTTP'

10 Jun 2019 timeline

b'Upserve ' disclosed a bug submitted by b'cache-money'
b'Ability to create own account UUID leads to stored XSS'

10 Jun 2019 timeline

b'Passit' disclosed a bug submitted by b'ni4had'
b'password rest link not expired after change the password'

10 Jun 2019 timeline

1 ... 428 429 430 431 432 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.