The unofficial HackerOne disclosure Timeline

b'QIWI' disclosed a bug submitted by b'postboy'
b'???????????? ????? ?????? ?????? ????? QVC (????????, ????? QVV ? QVP)'

20 Mar 2019 timeline

b'Twitter' disclosed a bug submitted by b'seifelsallamy'
b'url that twitter mobile site can not load'

19 Mar 2019 timeline

b'Semmle' disclosed a bug submitted by b'drspitfire'
b'Authenticated Cross-Site-Request-Forgery'

19 Mar 2019 timeline

b'Semmle' disclosed a bug submitted by b'0ufzayed'
b'the login blocking mechanism does not work correctly'

19 Mar 2019 timeline

b'Zomato' disclosed a bug submitted by b'pasw'
b'[www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s) '

18 Mar 2019 timeline

b'Zomato' disclosed a bug submitted by b'xsam'
b' credentials leakage in public lead to view dev websites '

18 Mar 2019 timeline

b'Valve' disclosed a bug submitted by b'vinnievan'
b'RCE on Steam Client via buffer overflow in Server Info'

15 Mar 2019 timeline

b'Inflection' disclosed a bug submitted by b'foobar7'
b'Privilege Escalation: Read-Only to Admin'

15 Mar 2019 timeline

15 Mar 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Unauthenticated blind SSRF in OAuth Jira authorization controller'

14 Mar 2019 timeline

b'Keybase' disclosed a bug submitted by b'jordanmilne'
b'Persistent XSS on keybase.io via "payload" field in `/user/sigchain_signature.toffee` template'

14 Mar 2019 timeline

b'Shopify' disclosed a bug submitted by b'ruvlol'
b'POST-based XSS on apps.shopify.com'

14 Mar 2019 timeline

b'Shopify' disclosed a bug submitted by b'ruvlol'
b'Reverse Proxy misroute leading to steal X-Shopify-Access-Token header'

14 Mar 2019 timeline

b'Unikrn' disclosed a bug submitted by b'v4lid0l'
b'????????? on CRM server without authorization'

14 Mar 2019 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'RCE which may occur due to `ActiveSupport::MessageVerifier` or `ActiveSupport::MessageEncryptor` (especially Active storage)'

13 Mar 2019 timeline

b'Vanilla' disclosed a bug submitted by b'mr_me'
b'Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution Vulnerability'

13 Mar 2019 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'0x09al'
b'Privilege Escalation by abusing non-existent path. (Windows)'

13 Mar 2019 timeline

b'Shopify' disclosed a bug submitted by b'ishahriyar'
b'Reflected XSS in *.myshopify.com/account/register'

12 Mar 2019 timeline

b'Redtube' disclosed a bug submitted by b'jtjisgod'
b'Reflect XSS on Mobile Search page '

11 Mar 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'eremeev'
b'[api.pandao.ru] IDOR ????????? ???????? ????? ?????? ????????????'

11 Mar 2019 timeline

1 ... 446 447 448 449 450 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.