The unofficial HackerOne disclosure Timeline

Mail.ru disclosed a bug submitted by njgadhiya
Cross-Site Request Forgery (CSRF) in my.games API

28 May 2020 timeline

Mail.ru disclosed a bug submitted by deadmin
XSS in [community.my.games]

28 May 2020 timeline

MariaDB disclosed a bug submitted by lixtelnis
Path traversal in command line client

28 May 2020 timeline

Mail.ru disclosed a bug submitted by zerboa
relap.io CSRF bypass on adding domain to use relap widgets

28 May 2020 timeline

Mail.ru disclosed a bug submitted by tr3harder
Reflected XSS at city-mobil.ru

28 May 2020 timeline

Mail.ru disclosed a bug submitted by tr3harder
IDOR of users

28 May 2020 timeline

Mail.ru disclosed a bug submitted by tr3harder
Account Takeover worki.ru

28 May 2020 timeline

Node.js third-party modules disclosed a bug submitted by 0x48piraj
OS Command Injection on Jison [all-parser-ports]

28 May 2020 timeline

lemlist disclosed a bug submitted by arsene_lupin
SSRF in img.lemlist.com that leads to Localhost Port Scanning

28 May 2020 timeline

Helium disclosed a bug submitted by azraelsec
Organization Takeover

27 May 2020 timeline

Helium disclosed a bug submitted by azraelsec
Organization Takeover via invitation API

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by r00tpgp
Previously Compromised PulseSSL VPN Hosts

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by sensoyard
Unrestricted file upload leads to stored xss on https://????????/

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by hunt4p1zza
[Critical] Insufficient Access Control On Registration Page of Webapps Website Allows Privilege Escalation to Administrator

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nagli
No Rate Limiting on https://??????/??????????/accounts/password/reset/ endpoint leads to Denial of Service

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by manshum12
Self XSS combine CSRF at https://????????/index.php

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by manshum12
XSS Reflected

27 May 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by droop3r
Remote Code Execution through DNN Cookie Deserialization

27 May 2020 timeline

Open-Xchange disclosed a bug submitted by catenacyber
Missing (or redundant) null check in `dcrypt_openssl_sign`

27 May 2020 timeline

1 2 3 ... 434

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.