The unofficial HackerOne disclosure Timeline

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic'
b'SSRF vulnerability on proxy.duckduckgo.com (access to metadata server on AWS)'

31 Oct 2018 timeline

b'HackerOne' disclosed a bug submitted by b'japz'
b'Hacker can bypass 2FA requirement and reporter blacklist through embedded submission form'

31 Oct 2018 timeline

b'' disclosed a bug submitted by b'bagipro'
b'Golden techniques to bypass host validations in Android apps'

30 Oct 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf'
b'Prototype pollution attack (lodash / constructor.prototype)'

30 Oct 2018 timeline

b'GitLab' disclosed a bug submitted by b'8ayac'
b'Stored XSS on Issue details page'

30 Oct 2018 timeline

b'Dropbox' disclosed a bug submitted by b'paulos_'
b'Dropbox Paper - Markdown XSS'

29 Oct 2018 timeline

b'Automattic' disclosed a bug submitted by b'paulos_'
b'Multiple File Manipulation bugs in WP Super Cache '

29 Oct 2018 timeline

b'Apache httpd (IBB)' disclosed a bug submitted by b'97ffb8d5'
b'DoS for HTTP/2 connections by crafted requests (CVE-2018-1333)'

28 Oct 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle'
b'Code Injection Vulnerability in morgan Package'

28 Oct 2018 timeline

b'Flock' disclosed a bug submitted by b'prial261'
b'Subdomain takeover dew to missconfigured project settings for Custom domain\xc2\xa0.'

26 Oct 2018 timeline

b'VK.com' disclosed a bug submitted by b'norver'
b'[??????/Android] ???????????? BroadcastReceiver ????????? ????????? ???? ??????? ? ?????????? ??????????? ??????? ????????????????? ??????????'

26 Oct 2018 timeline

b'HackerOne' disclosed a bug submitted by b'popeax'
b'Improper UUID validation results in bypass of #419896'

25 Oct 2018 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'User with privilege to maintain External Programs can update certain churned HackerOne programs'

25 Oct 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'frankspierings'
b'Session fixation in password protected public download.'

25 Oct 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'bugdiscloseguys'
b'Authentication Issue'

25 Oct 2018 timeline

b'Vanilla' disclosed a bug submitted by b'balis0ng'
b'A SQL injection vulnerability in Vanilla'

25 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'glc'
b'Open redirect on chaturbate.com (tipping/purchase_success)'

25 Oct 2018 timeline

b'Starbucks' disclosed a bug submitted by b'jackds'
b'Sidekiq web UI (Ruby background processing) accessible unauthenticated via https://gift-test.starbucks.co.jp/sidekiq/busy'

24 Oct 2018 timeline

b'Brave Software' disclosed a bug submitted by b'qab'
b'chrome://brave navigation from web'

23 Oct 2018 timeline

b'Brave Software' disclosed a bug submitted by b'qab'
b'chrome://brave can still be navigated to, leading to RCE'

23 Oct 2018 timeline

1 ... 467 468 469 470 471 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.