The unofficial HackerOne disclosure Timeline

b'HackerOne' disclosed a bug submitted by b'eremeev'
b'Invited team member can disclosure slack channels'

05 Apr 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds'
b'??????? Site Exposes DD2648 forms'

05 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'kapytein'
b'Path traversal leading to limited CSRF on GET requests on two endpoints'

05 Apr 2019 timeline

b'GitLab' disclosed a bug submitted by b'edoverflow'
b"Claiming package names in GitLab's automatic package referencer."

05 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'fransrosen'
b'Client-Side Race Condition using Marketo, allows sending user to data-protocol in Safari when form without onSuccess is submitted on www.hackerone.com'

05 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'jobert'
b'H1514 Shopify API ruby SDK session setup lacks input validation, resulting in SSRF and leakage of client secret'

05 Apr 2019 timeline

b'Unikrn' disclosed a bug submitted by b'v4lid0l'
b'bypass Claudflare access crm.mautic.com'

05 Apr 2019 timeline

b'Unikrn' disclosed a bug submitted by b'v4lid0l'
b'Path Disclosure Vulnerability http://crm.******.com'

05 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Corrupted Authorization header can cause logs not to be ingested properly in ????????'

04 Apr 2019 timeline

b'HackerOne' disclosed a bug submitted by b'm7mdharoun'
b'Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeover'

04 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'zombiehelp54'
b'H1514 Server Side Template Injection in Return Magic email templates?'

04 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'zhurig'
b'SSRF in hatchful.shopify.com'

04 Apr 2019 timeline

b'Shopify' disclosed a bug submitted by b'h13-'
b'Using GraphQL, STAFF with NO explicit permissions on Store can retrieve Shopify Payments Balance.'

04 Apr 2019 timeline

b'Starbucks' disclosed a bug submitted by b'damian89'
b'SSRF at ideas.starbucks.com'

03 Apr 2019 timeline

b'Monero' disclosed a bug submitted by b'thanhb'
b'Unauthorized access of Monero wallet by an unprivileged process'

03 Apr 2019 timeline

03 Apr 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'chalker'
b'`useragent` is vulnerable to ReDoS in user-agent string'

03 Apr 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'max'
b'Arbitrary file overwrites in `node-tar`'

03 Apr 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'dienpv'
b'Prototype pollution attack (smart-extend)'

03 Apr 2019 timeline

03 Apr 2019 timeline

1 ... 442 443 444 445 446 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.