The unofficial HackerOne disclosure Timeline

CS Money disclosed a bug submitted by abdilahrf_
[cs.money] Open Redirect Leads to Account Takeover

30 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by gamer7112
DOM XSS on https://www.???????

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nirajgautamit
Reflected XSS in https://www.??????/

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nirajgautamit
Reflected XSS in https://www.?????/

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by jayhanspara
Cross Site Scripting (XSS) – Reflected

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nagli
IDOR to Account Takeover on https://????/index.html

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by dwisiswant0
Unauthenticated Arbitrary File Deletion ("CVE-2020-3187") in ????????

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by erbbysam
SQLi in login form of ?????

29 Sep 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by un4gi
Stored XSS via Comment Form at ????????

29 Sep 2020 timeline

Yelp disclosed a bug submitted by oxecho
Email flooding using user invitation feature in biz.yelp.com due to lack of rate limiting

29 Sep 2020 timeline

Nextcloud disclosed a bug submitted by divyesh01
Access control missing while viewing the attachments in the "All boards"

29 Sep 2020 timeline

Stripo Inc disclosed a bug submitted by 0x4_aulia
Public and secret api key leaked in JavaScript source

29 Sep 2020 timeline

Nextcloud disclosed a bug submitted by dream_changer
Recently change email but still login with old email

29 Sep 2020 timeline

CS Money disclosed a bug submitted by khoabda1
IDOR in https://3d.cs.money/

28 Sep 2020 timeline

CS Money disclosed a bug submitted by khoabda1
Bypass restrict of member subscription to use custom background in https://3d.cs.money without prime subscription

28 Sep 2020 timeline

Nextcloud disclosed a bug submitted by warsocks
Missing server side controls when editing the board’s sharing permissions per user

28 Sep 2020 timeline

Nextcloud disclosed a bug submitted by xam24
No rate limiting on sinup page

28 Sep 2020 timeline

Nextcloud disclosed a bug submitted by alx_il
Re-Sharing allows increase of privileges

28 Sep 2020 timeline

CS Money disclosed a bug submitted by khoabda1
Bypass Filter on link of build

28 Sep 2020 timeline

1 2 3 ... 471

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.