The unofficial HackerOne disclosure Timeline

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze'
b'User able to access company details in yrityspalvelu without proper permissions'

22 Jun 2018 timeline

b'Vanilla' disclosed a bug submitted by b'samux'
b'A user can comment in private discussions without having permission to access the discussion'

22 Jun 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'petruknisme'
b'F5 BIG-IP Cookie Remote Information Disclosure'

21 Jun 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'mandark'
b'The session token in the URL'

19 Jun 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'ozzyoz'
b'Sitemap causing strain on your Lahitapiola.fi server'

19 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'greendog'
b'Insecure implementation of deserialization in cryo'

19 Jun 2018 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it'
b'Format String Vulnerability in the EdgeSwitch restricted CLI'

19 Jun 2018 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it'
b'Code Execution in restricted CLI of EdgeSwitch'

19 Jun 2018 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it'
b'Authenticated RCE in ToughSwitch'

19 Jun 2018 timeline

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it'
b'Triggering RCE using XSS to bypass CSRF in PowerBeam M5 300'

19 Jun 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'w2w'
b'CRLF injection mcs.mail.ru (leads to XSS)'

19 Jun 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'yasar'
b'Reflected XSS (myynti.lahitapiolarahoitus.fi)'

19 Jun 2018 timeline

b'Shopify' disclosed a bug submitted by b'llt4l'
b'Subdomain Takeover - https://competition.shopify.com/'

19 Jun 2018 timeline

b'VK.com' disclosed a bug submitted by b'trainzment'
b'???????? ????? ??????? ?? ?????'

18 Jun 2018 timeline

b'Zomato' disclosed a bug submitted by b'bagipro'
b'[Zomato Android/iOS] Theft of user session'

17 Jun 2018 timeline

b'Reverb.com' disclosed a bug submitted by b'bagipro'
b'Disclosure of all uploads to Cloudinary via hardcoded api secret in Android app'

17 Jun 2018 timeline

b'ICQ' disclosed a bug submitted by b'iframe'
b'api.icq.com / ??????????? ?????????????? ? ?????? ???? (???? ?????????).'

17 Jun 2018 timeline

b'MapsMarker.com e.U.' disclosed a bug submitted by b'damian89'
b'[Informational] Possible SQL Injection in inc/ajax-actions-frontend.php'

17 Jun 2018 timeline

b'VK.com' disclosed a bug submitted by b'paul-raddoor'
b'[???????? email ? ????????] by admin@notify.vk.com | email-flood'

16 Jun 2018 timeline

b'Vanilla' disclosed a bug submitted by b'fiona'
b'Forum Users Information Disclosure'

16 Jun 2018 timeline

1 ... 481 482 483 484 485 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.