The unofficial HackerOne disclosure Timeline

b'Shopify' disclosed a bug submitted by b'fisher'
b'H1514 Lack of access control on edit packing slip template'

24 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'anshuman_bh'
b'H1514 Ability to Edit Packaging Slip Templates and View Product & Shipping Information by a low privileged staff in a Sandbox Store'

24 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Discrepancy in hacker profile report count may reveal existence of a private program by publishing a report'

24 Apr 2019 timeline

b'Lob' disclosed a bug submitted by b'ajxchapman'
b'Old WebKit HTML agent in Template Preview function has multiple known vulnerabilities leading to RCE'

23 Apr 2019 timeline

b'Zendesk' disclosed a bug submitted by b'rubyroobs'
b'Leaked artifactory_api_key via GitHub.'

23 Apr 2019 timeline

b'Zendesk' disclosed a bug submitted by b'rubyroobs'
b'Leaked artifactory_key, artifactory_api_key, and gcloud refresh_token via GitHub.'

23 Apr 2019 timeline

b'Revive Adserver' disclosed a bug submitted by b'mbeccati'
b'Deserialization of Untrusted Data in www/delivery/adxmlrpc.php'

23 Apr 2019 timeline

b'Revive Adserver' disclosed a bug submitted by b'mbeccati'
b'Deserialization of Untrusted Data in www/delivery/dxmlrpc.php'

23 Apr 2019 timeline

b'Revive Adserver' disclosed a bug submitted by b'sumni'
b'Open redirect in switch account functionality'

23 Apr 2019 timeline

b'Grammarly' disclosed a bug submitted by b'metnew'
b'`open-url` command allows opening unlimited number of tabs pointing to arbitrary URLs'

23 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'spaceraccoon'
b'Unreleased CTF Levels are Revealed on /group/user/ID1?user=USERID endpoint'

23 Apr 2019 timeline

b'Shipt' disclosed a bug submitted by b'mdspr99'
b'Sensitive Clickjacking on admin login page.'

22 Apr 2019 timeline

b'Monero' disclosed a bug submitted by b'organdonor1'
b'RingCT malformed tx prevents target from being able to sweep balance'

20 Apr 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'JSON serialization of any Project model results in all Runner tokens being exposed through Quick Actions'

20 Apr 2019 timeline

b'concrete5' disclosed a bug submitted by b'hexife'
b'SVG file that HTML Included is able to upload via File Manager'

20 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'constructor2019'
b'Homograph attack in escalate report'

19 Apr 2019 timeline

b'Twitter' disclosed a bug submitted by b'terjanq'
b'Protected tweets exposure through the URL'

19 Apr 2019 timeline

b'GitLab' disclosed a bug submitted by b'rijalrojan'
b'Full access to internal Gitlab instances at redash.gitlab.com, dashboards.gitlab.com, prometheus.gitlab.com'

19 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'filedescriptor'
b'H1514 DOMXSS on Embedded SDK via Shopify.API.setWindowLocation abusing cookie Stuffing'

17 Apr 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'foobar7'
b'Talk / spreed: Disclosure of Room names and participants for password protected rooms'

17 Apr 2019 timeline

1 ... 437 438 439 440 441 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.