The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'xalerafera'
b'CSRF ?? ???????? ??????????? Pandao'

28 Jan 2019 timeline

b'VK.com' disclosed a bug submitted by b'povargek'
b'????????? ??????????????? email ? ?????? ???????? ? ????????????? ????? / CSRF ?? ????? ?????? ??? ????????? ?????????????'

28 Jan 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[??????] Cross-origin resource sharing misconfiguration (CORS)'

28 Jan 2019 timeline

b'Zomato' disclosed a bug submitted by b'dertajora'
b'Improper validation allows user to unlock Zomato Gold multiple times at the same restaurant within one day'

28 Jan 2019 timeline

26 Jan 2019 timeline

b'Uber' disclosed a bug submitted by b'seifelsallamy'
b'Reflected XSS POST method at partners.uber.com'

25 Jan 2019 timeline

b'Uber' disclosed a bug submitted by b'ngalog'
b"Chained Bugs to Leak Victim's Uber's FB Oauth Token"

25 Jan 2019 timeline

b'Uber' disclosed a bug submitted by b'ak1t4'
b'Subdomain takeover at signup.uber.com'

25 Jan 2019 timeline

b'Uber' disclosed a bug submitted by b'cablej'
b'IDOR in activateFuelCard id allows bulk lookup of driver uuids'

25 Jan 2019 timeline

b'Uber' disclosed a bug submitted by b'ngalog'
b'Open Redirect on central.uber.com allows for account takeover'

25 Jan 2019 timeline

b'Shopify' disclosed a bug submitted by b'emitrani'
b'Bypass GraphQL rate limit by abusing negative cost queries'

24 Jan 2019 timeline

b'Sony' disclosed a bug submitted by b'joaomatosf'
b'Remote Code Execution (RCE) in a Sony WebSystem'

23 Jan 2019 timeline

b'Sony' disclosed a bug submitted by b'joaomatosf'
b'Remote Code Execution (RCE) in a Sony Pictures WebSystem'

23 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'milkgames'
b"Deleting other people's comments on ModeratorMessages"

23 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'man_shum'
b'unlock self-lock by brute force '

23 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'natetheriver'
b'[help.steampowered.com] Account takeover bruteforcing SteamGuard'

23 Jan 2019 timeline

b'Starbucks' disclosed a bug submitted by b'apapedulimu'
b'Missing CSRF Token On Add Coupon To Basket'

22 Jan 2019 timeline

b'Starbucks' disclosed a bug submitted by b'k3m'
b'unuse domain still in using at wechat by Starbucks East China'

22 Jan 2019 timeline

b'Weblate' disclosed a bug submitted by b'elmahdi'
b'No Rate On Add Suggest'

22 Jan 2019 timeline

b'Zomato' disclosed a bug submitted by b'sudi'
b'[auth2.zomato.com] Reflected XSS at `oauth2/fallbacks/error` | ORY Hydra an OAuth 2.0 and OpenID Connect Provider'

21 Jan 2019 timeline

1 ... 449 450 451 452 453 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.