The unofficial HackerOne disclosure Timeline

b'Valve' disclosed a bug submitted by b'tvmpt'
b'XSS @ store.steampowered.com via agecheck path name'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'romesful'
b"CSRF | Ban or unban users in broadcast's chat"

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'mvc'
b"Stored XSS in the guide's GameplayVersion (www.dota2.com)"

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'zemnmez'
b'code injection, steam chat client'

07 Jan 2019 timeline

b'Valve' disclosed a bug submitted by b'zemnmez'
b'XSS in steam react chat client'

07 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'khoiasd'
b'Response program can create bounty table'

07 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'phsmile'
b'Missing Two Factor Authentication in /admin/login'

07 Jan 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'ismailtsdln'
b'Information Exposure Through Directory Listing - https://apps.nextcloud.com/static/'

07 Jan 2019 timeline

b'CFP Time' disclosed a bug submitted by b'badcracker'
b'Error Page Content Spoofing or Text Injection'

07 Jan 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle'
b'Command Injection Vulnerability in kill-port Package'

06 Jan 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t'
b'[buttle] Unsafe rendering of Markdown files'

06 Jan 2019 timeline

b'Liberapay' disclosed a bug submitted by b'gouveaheitor'
b'User Enumeration '

05 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'mga_bobo'
b"User login page doesn't implement any form of rate limiting"

04 Jan 2019 timeline

b'Inflection' disclosed a bug submitted by b'csanuragjain'
b'Malicious callback url can be set while creating application in identity'

03 Jan 2019 timeline

03 Jan 2019 timeline

b'Smule' disclosed a bug submitted by b'fr_0_ank'
b'Disclosure of information about the system, configuration files.'

03 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Submitting report through Embedded Submission form gives user indefinite access to a profile'

03 Jan 2019 timeline

b'Khan Academy' disclosed a bug submitted by b'sameerphad72'
b'Creating Unlimited Fake Accounts.'

02 Jan 2019 timeline

b'HackerOne' disclosed a bug submitted by b'thefrog'
b'@wearehackerone.com is vulnerable to namespace attacks due to hackerone.com not being RFC2142 compliant.'

02 Jan 2019 timeline

b'RATELIMITED' disclosed a bug submitted by b'z0mb13'
b'Local File Download'

01 Jan 2019 timeline

1 ... 455 456 457 458 459 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.