The unofficial HackerOne disclosure Timeline

b'New Relic' disclosed a bug submitted by b'niwasaki'
b'WordPress User Enumeration - blog.newrelic.com'

19 Jan 2019 timeline

b'Twitter' disclosed a bug submitted by b'nyuszika7h'
b'Changing email address on Twitter for Android unsets "Protect your Tweets"'

18 Jan 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'websecnl'
b'SOAP WSDL Parser SQL Code Execution'

16 Jan 2019 timeline

b'Dovecot' disclosed a bug submitted by b'mikki_khan'
b'command Injection in rawlog binary'

16 Jan 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'godexmachine'
b'[online.games.mail.ru] - Sensitive information disclosure'

16 Jan 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'godexmachine'
b'[3k.mail.ru] - Content spoofing'

16 Jan 2019 timeline

b'Dropbox' disclosed a bug submitted by b'karlito'
b'Disclose anonymous accessible link on embedded files in paper dropbox sessions'

15 Jan 2019 timeline

b'Weblate' disclosed a bug submitted by b'elmahdi'
b'No Rate Limit On Add new word'

14 Jan 2019 timeline

b'RATELIMITED' disclosed a bug submitted by b'aty'
b'Line feed injection in get request leads AWS S3 Bucket information disclosure '

14 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Embedded submission form UUIDs can be enumerated through GraphQL node interface, exposing sensitive program details'

11 Jan 2019 timeline

b'SEMrush' disclosed a bug submitted by b'saya'
b'Persistent CSV injection'

11 Jan 2019 timeline

b'SEMrush' disclosed a bug submitted by b'prial261'
b'protocol & Ports are not shown in third-party site redirect warning page '

11 Jan 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mik317'
b'Account takeover due to CSRF in "Account details" option on ?????????'

11 Jan 2019 timeline

b'Chaturbate' disclosed a bug submitted by b'imran1121'
b'Unsecure Caching Mechanism May Expose users Credit Card Details'

11 Jan 2019 timeline

b'Starbucks' disclosed a bug submitted by b'debo'
b'SQL Injection Proof of Concept for Starbucks URL'

09 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'drosofraymaybe'
b'Content spoofing on error pages or text injection'

08 Jan 2019 timeline

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'phreak'
b'Production secret key leak in config/secrets.yml'

08 Jan 2019 timeline

b'Urban Dictionary' disclosed a bug submitted by b'linkks'
b'Source Code Disclosure'

08 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'ronak_9889'
b'Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'xpaw'
b'Reflected XSS on help.steampowered.com'

07 Jan 2019 timeline

1 ... 450 451 452 453 454 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.