The unofficial HackerOne disclosure Timeline

b'InnoGames' disclosed a bug submitted by b'wwshack'
b'Information disclosure via ".htaccess" at https://login.innogames.de'

25 Feb 2019 timeline

b'VK.com' disclosed a bug submitted by b'page1337'
b'Page replacement and redirect loop'

24 Feb 2019 timeline

b'Gatecoin' disclosed a bug submitted by b'p4fg'
b'API request signature can be reused with other parameters/data than the original in certain cases'

23 Feb 2019 timeline

b'Slack' disclosed a bug submitted by b'kiyell'
b'AWS bucket leading to iOS test build code and configuration exposure'

23 Feb 2019 timeline

b'Slack' disclosed a bug submitted by b'elber'
b'Bypass of the SSRF protection in Event Subscriptions parameter.'

22 Feb 2019 timeline

b'Slack' disclosed a bug submitted by b'elber'
b'SSRF in api.slack.com, using slash commands and bypassing the protections.'

22 Feb 2019 timeline

b'Liberapay' disclosed a bug submitted by b'doug18'
b'Session Cookie without HttpOnly and secure flag set'

21 Feb 2019 timeline

b'Monero' disclosed a bug submitted by b'sobhraj_charles'
b'DoS for remote nodes using Slow Loris attack'

21 Feb 2019 timeline

b'MariaDB' disclosed a bug submitted by b'sergeybelove'
b'CRLF injection at https://mariadb.org/.'

21 Feb 2019 timeline

b'HackerOne' disclosed a bug submitted by b'adac95'
b'DOM Based XSS in www.hackerone.com via PostMessage'

21 Feb 2019 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b"A small set of users were assigned someone else's payout preference"

20 Feb 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'rafiem'
b'Account Takeover using Linked Accounts due to lack of CSRF protection'

20 Feb 2019 timeline

b'Brave Software' disclosed a bug submitted by b'sonicnik'
b'There is vulnebility Click Here TO fix'

19 Feb 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer'
b'Facebook OAuth Code Theft through referer leakage on support.rockstargames.com'

19 Feb 2019 timeline

b'Dropbox' disclosed a bug submitted by b'david993'
b'Significant Two step verification Authentication Bypass'

19 Feb 2019 timeline

b'Block.one' disclosed a bug submitted by b'kushal89shah'
b"[FG-VD-18-126] Buffer Overflow Vulnerability in Latest EOS's EOSIO.WASMSDK Repository II"

19 Feb 2019 timeline

b'Block.one' disclosed a bug submitted by b'kushal89shah'
b"[FG-VD-18-125] Buffer Overflow Vulnerability in Latest EOS's EOSIO.WASMSDK Repository"

19 Feb 2019 timeline

b'Block.one' disclosed a bug submitted by b'kushal89shah'
b"[FG-VD-18-101] Buffer Overflow Vulnerability in EOS's WAVM Library and also in latest WAVM Library Parent Repository"

19 Feb 2019 timeline

b'Block.one' disclosed a bug submitted by b'kushal89shah'
b"[FG-VD-18-100] Heap Buffer Overflow Vulnerability in EOS's forked repository of Binaryen Library and also in latest Binaryen Library Parent Repository"

19 Feb 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'lincoln9932'
b'XSS ?? e.mail.ru ? ????????? ??????????!'

18 Feb 2019 timeline

1 ... 443 444 445 446 447 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.