The unofficial HackerOne disclosure Timeline

b'New Relic' disclosed a bug submitted by b'jon_bottarini'
b'Bypass of my three other reports #267636 + #255894 + #271861 - (IDOR) Ability to see full name associated with other New Relic accounts'

01 May 2018 timeline

b'Rockstar Games' disclosed a bug submitted by b'europa'
b'Client-side Template Injection in Search, user email/token leak and maybe sandbox escape'

01 May 2018 timeline

b'Ruby' disclosed a bug submitted by b'mrtc0'
b"Invalid URL parsing '#'"

01 May 2018 timeline

b'Dropbox' disclosed a bug submitted by b'oaidjoaisdjoaisjdioasfsdhfuios'
b'User Impersonation - Create Support Ticket With Any Registered Account Email'

01 May 2018 timeline

b'GitLab' disclosed a bug submitted by b'wuqidashi'
b'SSRF vulnerability in gitlab.com webhook'

30 Apr 2018 timeline

b'Informatica' disclosed a bug submitted by b'strukt'
b'XXE at Informatica sub-domain'

30 Apr 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'chalker'
b'`superstatic` is vulnerable to path traversal on Windows'

29 Apr 2018 timeline

b'Ruby' disclosed a bug submitted by b'tenderlove'
b'Response splitting vulnerability in WEBrick'

29 Apr 2018 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'chalker'
b'`foreman` is vulnerable to ReDoS in path'

28 Apr 2018 timeline

28 Apr 2018 timeline

b'ICQ' disclosed a bug submitted by b'iframe'
b'api.icq.com / ??????????? ??????????????? ????? ?????? ???????????? ??? ?????? ???????? ???.'

28 Apr 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'exadmin'
b'DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation'

28 Apr 2018 timeline

b'ICQ' disclosed a bug submitted by b'iframe'
b'api.icq.com / ????????? ?????? ?? ???????? ????????? ?????? ???????? ?????? "&r"'

28 Apr 2018 timeline

b'Ed' disclosed a bug submitted by b'cybertiger'
b'Session Cookie Without Secure Flag '

28 Apr 2018 timeline

b'Zomato' disclosed a bug submitted by b'riya'
b'[www.zomato.com] IDOR - Gold Subscription Details, Able to view "Membership ID" and "Validity Details" of other Users'

28 Apr 2018 timeline

b'ICQ' disclosed a bug submitted by b'iframe'
b'api.icq.com / ??????????? ???????? ???? ?????? (???? icqsystem) '

28 Apr 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'muon4'
b"Authorization issue on 'valtakirjat' (/e2/verkkopalvelu/)"

28 Apr 2018 timeline

b'LocalTapiola' disclosed a bug submitted by b'richardtelleng'
b'Internal IP Address Disclosure at https://www.lahitapiolarahoitus.fi/wp-json/wp/v2/pages'

28 Apr 2018 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'GitLab CI runner can read and poison cache of all other projects'

27 Apr 2018 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Evaluating Ruby code by injecting Rescue job on the system_hook_push queue through web hook'

27 Apr 2018 timeline

1 ... 497 498 499 500 501 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.