The unofficial HackerOne disclosure Timeline

b'LocalTapiola' disclosed a bug submitted by b'yasar'
b'Reflected XSS (myynti.lahitapiolarahoitus.fi)'

19 Jun 2018 timeline

b'Shopify' disclosed a bug submitted by b'llt4l'
b'Subdomain Takeover - https://competition.shopify.com/'

19 Jun 2018 timeline

b'VK.com' disclosed a bug submitted by b'trainzment'
b'???????? ????? ??????? ?? ?????'

18 Jun 2018 timeline

b'Zomato' disclosed a bug submitted by b'bagipro'
b'[Zomato Android/iOS] Theft of user session'

17 Jun 2018 timeline

b'Reverb.com' disclosed a bug submitted by b'bagipro'
b'Disclosure of all uploads to Cloudinary via hardcoded api secret in Android app'

17 Jun 2018 timeline

b'ICQ' disclosed a bug submitted by b'iframe'
b'api.icq.com / ??????????? ?????????????? ? ?????? ???? (???? ?????????).'

17 Jun 2018 timeline

b'MapsMarker.com e.U.' disclosed a bug submitted by b'damian89'
b'[Informational] Possible SQL Injection in inc/ajax-actions-frontend.php'

17 Jun 2018 timeline

b'VK.com' disclosed a bug submitted by b'paul-raddoor'
b'[???????? email ? ????????] by admin@notify.vk.com | email-flood'

16 Jun 2018 timeline

b'Vanilla' disclosed a bug submitted by b'fiona'
b'Forum Users Information Disclosure'

16 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'mlucool'
b'npm packages that overlap with core node packages'

16 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'caioluders'
b'[git-dummy-commit] Command injection on the msg parameter'

15 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'greendog'
b'Insecure implementation of deserialization in funcster'

15 Jun 2018 timeline

b'Nextcloud' disclosed a bug submitted by b'reinism'
b'File access control rules not enforced on image files'

15 Jun 2018 timeline

b'Shopify' disclosed a bug submitted by b'tbh'
b'Improper access check by Kit leads to controlling attributes of store & getting analytics by deleted Store member via dual messenger A/C'

15 Jun 2018 timeline

b'Shopify' disclosed a bug submitted by b'rijalrojan'
b'Publicly Accessible Datadog link'

15 Jun 2018 timeline

14 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lirantal'
b'Remote Command Execution vulnerability in pullit'

14 Jun 2018 timeline

14 Jun 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'chalker'
b'`utile` allocates uninitialized Buffers when number is passed in input'

14 Jun 2018 timeline

14 Jun 2018 timeline

1 ... 487 488 489 490 491 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.