The unofficial HackerOne disclosure Timeline

b'Liberapay' disclosed a bug submitted by b'mks11nov'
b'A single user can subscribe a community multiple times'

07 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'kunal94'
b'Punny code Detection Parsing should be implemented on Markdown '

07 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'zir0x'
b'Returning back from the browser after logging off will disclose some information'

07 Jun 2018 timeline

b'Vend' disclosed a bug submitted by b'stok'
b'Race Condition : Exploiting the loyalty claim https://xxx.vendhq.com/loyalty/claim/email/xxxxx url and gain x amount of loyalty bonus/cash'

07 Jun 2018 timeline

b'HackerOne' disclosed a bug submitted by b'japz'
b'Exposing hackerone users personally identifiable information by abusing sandbox with swag reward enabled'

07 Jun 2018 timeline

b'HackerOne' disclosed a bug submitted by b'herrera'
b'Lack of cross-origin request blocking allows leaking of sensitive information on several endpoints'

07 Jun 2018 timeline

b'Tor' disclosed a bug submitted by b'metnew'
b'Tor Browser: iframe with `data:` uri has access to parent window'

06 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'kapytein'
b"Exploiting JSONP callback on /username/charts.json endpoint leads to information disclosure despite user's privacy settings"

05 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'zuh4n'
b'Missing back-end user input validation can lead to DOS flaw'

05 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'wsfengfan474'
b'Csrf token does not meet security design'

05 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'lahataleputih'
b'REGISTRATION USING FAKE EMAIL ACCOUNT'

05 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'kapytein'
b'Unsafe deserialization in Libera Pay allows to escalate a SQL injection to Remote Command Execution'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'mah1ndra'
b'CSRF token manipulation in every possible form submits. NO server side Validation'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'buggy_hunter'
b'csrf token did not changed after login/logout many times'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'nthack'
b'Current CSP Policy chained with HTML Injection can lead to Data Exfiltration'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'4w3'
b'Phishing by Navigating Browser Tabs'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'lahataleputih'
b'CSRF ON EDITING NAME (OPTIONAL)'

04 Jun 2018 timeline

b'Liberapay' disclosed a bug submitted by b'hack2684'
b'Insecure Account Deletion'

04 Jun 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'inet_freedom'
b' Local paths disclosure through error message'

04 Jun 2018 timeline

b'Mail.Ru' disclosed a bug submitted by b'lincoln9932'
b'lootdog.io XSS'

04 Jun 2018 timeline

1 ... 493 494 495 496 497 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.