The unofficial HackerOne disclosure Timeline

b'HackerOne' disclosed a bug submitted by b'rohitdua'
b'Lack of length validation on user address attribute'

11 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Repeated mediation requests and multiple emails possible on a report.'

11 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'fransrosen'
b'H1514 Simple phishing using auto-created modal with weak URL-pattern check in incontext_app_link'

10 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'corb3nik'
b'Verbose PHP error messages exposed on a blog article'

10 Apr 2019 timeline

b'Starbucks' disclosed a bug submitted by b'13ern'
b'Stored XSS on www.starbucks.com.sg/careers/career-center/career-landing-*'

10 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'cablej'
b'H1514 Wholesale customer without checkout permission can complete purchases'

10 Apr 2019 timeline

b'Twitter' disclosed a bug submitted by b'filedescriptor'
b'Insufficient OAuth callback validation which leads to Periscope account takeover'

10 Apr 2019 timeline

b'Starbucks' disclosed a bug submitted by b'spaceraccoon'
b'RCE and Complete Server Takeover of http://www.?????.starbucks.com.sg/'

10 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'kirils'
b'Hogging up all the resources on hackerone.com'

10 Apr 2019 timeline

b'GitLab' disclosed a bug submitted by b'ngalog'
b'Bypass of GitLab CI runner slash fix in YAML validation'

10 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'flashdisk'
b'Emails of invited collaborators are disclosed in full in payload for report participants'

09 Apr 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t'
b'[harp] Path traversal using symlink'

09 Apr 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds'
b'Access to all ????????? files, including CAC authentication bypass'

08 Apr 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds'
b'??? exposes sensitive shipment information to public web'

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'manoelt'
b'$50 million CTF Writeup'

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'rabbidbyte'
b'Weak credentials, Blind SQLi, Timing attack, that leads to web admin access'

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'0xc0ffee'
b"0xc0ffee's 50M-CTF Submission"

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'dee-see'
b'Several vulnerabilities lead to Remote Code Execution and Arbitraty File Read on multiple servers'

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'stong'
b'LFI on Accounting server and RCE on FliteThermostat admin server'

08 Apr 2019 timeline

b'50m-ctf' disclosed a bug submitted by b'ajxchapman'
b'@ajxchapman 50m-ctf writeup'

08 Apr 2019 timeline

1 ... 439 440 441 442 443 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.