The unofficial HackerOne disclosure Timeline

b'Chaturbate' disclosed a bug submitted by b'cunn'
b'No rate limiting in changing room subject.'

09 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'cunn'
b'No rate limiting in starting up a bot.'

09 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'kaustubh'
b'Missing CSRF Protection in /stats EndPoint.'

09 Oct 2018 timeline

b'Snapchat' disclosed a bug submitted by b'th3g3nt3lman'
b'Github Token Leaked publicly for https://github.sc-corp.net'

08 Oct 2018 timeline

b'Infogram' disclosed a bug submitted by b'boxpy'
b'CORS on (ws.infogram.com)'

08 Oct 2018 timeline

b'VK.com' disclosed a bug submitted by b'povargek'
b'????????? ??????? ??????? ? Long Pool ? ????????????? ???????? ?????, ???? ?? ?????-???? ???? ?? ???????? ??????'

07 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'lucach'
b'Unrestricted POST request size on roomlogin endpoint'

07 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'footstep'
b'Missing Rate Limitation at /apps/upload_app/ '

07 Oct 2018 timeline

b'Snapchat' disclosed a bug submitted by b'malcolmx'
b'Domain Takeover in [obviousengine.com] a snapchat acquisitions'

07 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'avinash_'
b'CSRF on change video thumbnail at https://chaturbate.com'

07 Oct 2018 timeline

b'Badoo' disclosed a bug submitted by b'jarvis7'
b'Compromising the user ID'

07 Oct 2018 timeline

b'ICQ' disclosed a bug submitted by b'ruvlol'
b'easyXDM allows cross domain postmessaging with any origin, leaking sensitive info'

05 Oct 2018 timeline

b'Django' disclosed a bug submitted by b'greenwolf'
b'Email Spoofing Possible on djangoproject.com Email Domain'

05 Oct 2018 timeline

b'Zomato' disclosed a bug submitted by b'areizen'
b'Reflected XSS on developers.zomato.com'

05 Oct 2018 timeline

b'Shopify' disclosed a bug submitted by b'zhurig'
b'Race condition at create new Location'

05 Oct 2018 timeline

b'Uber' disclosed a bug submitted by b'0x0luke'
b'XSS on partners.uber.com due to no user input sanitisation '

04 Oct 2018 timeline

b'Chaturbate' disclosed a bug submitted by b'mase289'
b'Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.com'

04 Oct 2018 timeline

b'Brave Software' disclosed a bug submitted by b'metnew'
b'`settingcontent-ms` files lacks "mark of the web" => execute code by dbl click in Downloads toolbar'

04 Oct 2018 timeline

b'Brave Software' disclosed a bug submitted by b'metnew'
b'Cross-origin page stays focused before/after downloading + uninformative modal window for download'

04 Oct 2018 timeline

b'Brave Software' disclosed a bug submitted by b'metnew'
b'`alert()` dialogs on `chrome-extension://` origin (internal pages)'

04 Oct 2018 timeline

1 ... 467 468 469 470 471 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.