The unofficial HackerOne disclosure Timeline

b'Monero' disclosed a bug submitted by b'ahook'
b'epee will accept an arbitrary amount of leading line-breaks in an http request'

02 Aug 2018 timeline

b'Monero' disclosed a bug submitted by b'ahook'
b'monerod can be disabled by a well-timed TCP reset packet'

02 Aug 2018 timeline

b'Monero' disclosed a bug submitted by b'jagerman'
b'A bug in the Monero wallet balance can enable theft from exchanges'

02 Aug 2018 timeline

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan'
b'LFI and SSRF via XXE in emblem editor'

01 Aug 2018 timeline

b'GoCD' disclosed a bug submitted by b'4cad'
b'Spring security configuration allows agent sessions to be hijacked'

31 Jul 2018 timeline

b'Augur' disclosed a bug submitted by b'karalabe'
b'Full UI hijack via dormant browser service workers'

31 Jul 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b's_p_q_r'
b'[account.mail.ru] XSS ?? ???????? ???????? ???????? ????? backUrl'

31 Jul 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b's_p_q_r'
b'[account.mail.ru] XSS ?? ???????? ?????????????? ??????'

31 Jul 2018 timeline

b'Trello' disclosed a bug submitted by b'woj_ciech'
b'Stored XSS in Treeview plugin'

30 Jul 2018 timeline

b'Slack' disclosed a bug submitted by b'0x0luke'
b'HTML Injection inside Slack promotional emails'

30 Jul 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'rootnepal'
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/)'

30 Jul 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lolwaleet'
b'url-parse package return wrong hostname '

30 Jul 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'yzy9951'
b'[FG-VD-17-063] NextCloud Insufficient Attack Protection Vulnerability Notification'

29 Jul 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'kaysbugs'
b'bypass of 2FA'

29 Jul 2018 timeline

b'Harvest' disclosed a bug submitted by b'config'
b'Unrestricted View to People\xe2\x80\x99s Web Invoices Data without knowing the Unique Hash'

29 Jul 2018 timeline

b'Harvest' disclosed a bug submitted by b'config'
b'Content Injection at First & Last Name Parameters that could Lead Fraud Issue'

29 Jul 2018 timeline

b'VK.com' disclosed a bug submitted by b'trainzment'
b'???????? ?????????? ?????? ???????????? / ??????'

28 Jul 2018 timeline

b'Valve' disclosed a bug submitted by b'moskowsky'
b'SQL Injection in report_xml.php through countryFilter[] parameter'

27 Jul 2018 timeline

b'Monero' disclosed a bug submitted by b'phiren'
b'Attcker can trick monero wallet into reporting it recived twice as much with alternative tx_keypubs'

27 Jul 2018 timeline

b'GitLab' disclosed a bug submitted by b'rootbakar28'
b'HTML TAG INJECTION ON PROFILE NAME'

27 Jul 2018 timeline

1 ... 475 476 477 478 479 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.