The unofficial HackerOne disclosure Timeline

b'Shopify' disclosed a bug submitted by b'commandersnuggle'
b'Access to Employee calendar disclosing internal presentation and meetings'

08 Mar 2019 timeline

b'GitLab' disclosed a bug submitted by b'dhakalananda'
b'Inadequate cache control in gitter allows to view private chat room'

08 Mar 2019 timeline

b'Starbucks' disclosed a bug submitted by b'cujanovic'
b'Reflected Cross site Scripting (XSS) on www.starbucks.com'

08 Mar 2019 timeline

b'Starbucks' disclosed a bug submitted by b'loxiran'
b'Bug in GraphQL and API integration leads to limited user address disclosure'

08 Mar 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer'
b'Stealing Facebook OAuth Code Through Screenshot viewer'

05 Mar 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'hudmi'
b'[pandao.ru] ??????????? ???????? ?????????????? ???????? ??????'

05 Mar 2019 timeline

b'Homebrew' disclosed a bug submitted by b'pappan'
b'Email enumeration of users'

05 Mar 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Exfiltrate and mutate repository and project data through injected templated service'

05 Mar 2019 timeline

b'Unikrn' disclosed a bug submitted by b'noob-walid'
b'ssh: unprivileged users may hijack due to backdated ssh version open port found(???.unikrn.com)'

04 Mar 2019 timeline

b"Hanno's projects" disclosed a bug submitted by b'anonym0us_py'
b'Bypassing the fix of #503922'

04 Mar 2019 timeline

b'OLX' disclosed a bug submitted by b'paulochoupina'
b'XSS - main page - search[user_id] parameter'

03 Mar 2019 timeline

b"Hanno's projects" disclosed a bug submitted by b'zophi'
b'Open redirect on the https://tt.hboeck.de'

03 Mar 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b"Snippet JS template allows attacker to read a user's private snippets"

03 Mar 2019 timeline

b'Urban Dictionary' disclosed a bug submitted by b'red_assassin'
b'Users able to set video url for unpublished words and able to see the name of unpublished words'

02 Mar 2019 timeline

b'Imgur' disclosed a bug submitted by b'giddsec'
b'Stored XSS on imgur profile'

02 Mar 2019 timeline

b'Twitter' disclosed a bug submitted by b'mik317'
b'CSRF on https://www.niche.co leads to "account disconnection"'

02 Mar 2019 timeline

28 Feb 2019 timeline

b'Twitter' disclosed a bug submitted by b'healdb'
b'Takeover of Twitter-owned domain at mobileapplinking.com'

28 Feb 2019 timeline

b'Twitter' disclosed a bug submitted by b'mik317'
b'CSRF and probable account takeover on https://www.niche.co'

28 Feb 2019 timeline

b'Mavenlink' disclosed a bug submitted by b'tolo7010'
b'User uploaded portfolio files can be accessed by any user even after deleted'

27 Feb 2019 timeline

1 ... 445 446 447 448 449 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.