The unofficial HackerOne disclosure Timeline

b'New Relic' disclosed a bug submitted by b'michiel'
b'User to Admin privilege escalation in Infrastructure Conditions - /v2/accounts/1835740/alerts/conditions'

17 Aug 2018 timeline

b'Khan Academy' disclosed a bug submitted by b'miguel_santareno'
b'POST XSS in https://www.khanacademy.org.tr/ via page_search_query parameter'

17 Aug 2018 timeline

b'Starbucks' disclosed a bug submitted by b'00pushpam'
b'Open Redirect on /account/signin?ReturnUrl'

16 Aug 2018 timeline

b'Starbucks' disclosed a bug submitted by b'peuch'
b'Information Leak - Github - JMS Information'

16 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'rootbakar'
b'DNS Misconfiguration'

16 Aug 2018 timeline

b'Informatica' disclosed a bug submitted by b'0ang3el'
b'SSRF on infawiki.informatica.com and infawikitest.informatica.com'

16 Aug 2018 timeline

b'Shipt' disclosed a bug submitted by b'plenum'
b'Subdomain takeover at segway.shipt.com'

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'alex2018frolov'
b'XSS ( ?????? ? ???????? )'

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'obmi'
b'XSS via Cookie in e.mail.ru'

15 Aug 2018 timeline

b'' disclosed a bug submitted by b'edoverflow'
b"Cross-site request forgery vulnerability resulting in the deletion of a user's account."

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'obmi'
b'Stored self-xss and its escalation to a victim account in e.mail.ru'

15 Aug 2018 timeline

b'Cloudflare' disclosed a bug submitted by b'grampae'
b'Remote file inclusion using "/cdn-cgi/pe/bag2?r[]=" '

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'shafigullin'
b'XSS touch.mail.ru compose Body'

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'shafigullin'
b'XSS account.mail.ru in state JSON script'

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'shafigullin'
b'XSS e.mail.ru fixSpecialSymbols'

15 Aug 2018 timeline

b'Kaspersky Lab' disclosed a bug submitted by b'rkhunter'
b'test report'

15 Aug 2018 timeline

b'DuckDuckGo' disclosed a bug submitted by b'fpatrik'
b'SSRF in proxy.duckduckgo.com via the image_host parameter'

15 Aug 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'becojo'
b'[flintcms] Account takeover due to blind MongoDB injection in password reset'

15 Aug 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'maxarr'
b'XSS ? ???? ??????, ? ????? ?????? ?????.'

15 Aug 2018 timeline

b'??????' disclosed a bug submitted by b'cdl'
b'Phone Call to XXE via Interactive Voice Response'

15 Aug 2018 timeline

1 ... 477 478 479 480 481 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.