The unofficial HackerOne disclosure Timeline

b'SEMrush' disclosed a bug submitted by b'saya'
b'Persistent CSV injection'

11 Jan 2019 timeline

b'SEMrush' disclosed a bug submitted by b'prial261'
b'protocol & Ports are not shown in third-party site redirect warning page '

11 Jan 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mik317'
b'Account takeover due to CSRF in "Account details" option on ?????????'

11 Jan 2019 timeline

b'Chaturbate' disclosed a bug submitted by b'imran1121'
b'Unsecure Caching Mechanism May Expose users Credit Card Details'

11 Jan 2019 timeline

b'Starbucks' disclosed a bug submitted by b'debo'
b'SQL Injection Proof of Concept for Starbucks URL'

09 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'drosofraymaybe'
b'Content spoofing on error pages or text injection'

08 Jan 2019 timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'phreak'
b'Production secret key leak in config/secrets.yml'

08 Jan 2019 timeline

b'Urban Dictionary' disclosed a bug submitted by b'linkks'
b'Source Code Disclosure'

08 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'ronak_9889'
b'Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'xpaw'
b'Reflected XSS on help.steampowered.com'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'tvmpt'
b'XSS @ store.steampowered.com via agecheck path name'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'romesful'
b"CSRF | Ban or unban users in broadcast's chat"

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'mvc'
b"Stored XSS in the guide's GameplayVersion (www.dota2.com)"

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'zemnmez'
b'code injection, steam chat client'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'zemnmez'
b'XSS in steam react chat client'

07 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'khoiasd'
b'Response program can create bounty table'

07 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'phsmile'
b'Missing Two Factor Authentication in /admin/login'

07 Jan 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'ismailtsdln'
b'Information Exposure Through Directory Listing - https://apps.nextcloud.com/static/'

07 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'badcracker'
b'Error Page Content Spoofing or Text Injection'

07 Jan 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle'
b'Command Injection Vulnerability in kill-port Package'

06 Jan 2019 timeline

1 ... 445 446 447 448 449 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.