The unofficial HackerOne disclosure Timeline

HackerOne disclosed a bug submitted by brdoors3
Information disclosure - Feedback is accessible on Public profile even after 'disallowed' at https://hackerone.com/settings/feedback

03 Aug 2021 timeline

Informatica disclosed a bug submitted by montypythin
Improper Sanitization leads to XSS Fire on admin panel

03 Aug 2021 timeline

GitHub Security Lab disclosed a bug submitted by artem
Java: Unsafe deserialization with Jackson

02 Aug 2021 timeline

GitHub Security Lab disclosed a bug submitted by someone
[Java] CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

02 Aug 2021 timeline

GitHub Security Lab disclosed a bug submitted by jorgectf
[Python] CWE-287: LDAP Improper Authentication

02 Aug 2021 timeline

GitHub Security Lab disclosed a bug submitted by someone
[Python]: Add SqlAlchemy support for SQL injection query

02 Aug 2021 timeline

GitHub Security Lab disclosed a bug submitted by p0wn4j
[Java] CWE-601: Add Spring URL Redirect ResponseEntity sink

02 Aug 2021 timeline

GitLab disclosed a bug submitted by az3z3l
CSRF on /api/graphql allows executing mutations through GET requests

02 Aug 2021 timeline

Bitwarden disclosed a bug submitted by jjlin
When uploading attachments, unencrypted file names are made available to the server

02 Aug 2021 timeline

Sifchain disclosed a bug submitted by n33dm0n3y
Vulnerable javascript dependency at Main domain

02 Aug 2021 timeline

Nextcloud disclosed a bug submitted by abdullah-a
Two-factor authentication enforcement bypass

31 Jul 2021 timeline

Rocket.Chat disclosed a bug submitted by sonarsource
Post-Auth Blind NoSQL Injection in the users.list API leads to Remote Code Execution

31 Jul 2021 timeline

Snapchat disclosed a bug submitted by rms
Bitmoji source code is accessible

31 Jul 2021 timeline

UPchieve disclosed a bug submitted by ben_lay
url redirection

30 Jul 2021 timeline

8x8 disclosed a bug submitted by melbadry9
DNS Misconfiguration (Subdomain Takeover) - .8x8.com

30 Jul 2021 timeline

Stripo Inc disclosed a bug submitted by jmrcsnchz
Bypassing Content-Security-Policy leads to open-redirect and iframe xss

30 Jul 2021 timeline

Snapchat disclosed a bug submitted by txt3rob
Exposed Kubernetes API - RCE/Exposed Creds

29 Jul 2021 timeline

Snapchat disclosed a bug submitted by coolboss
Stealing SSO Login Tokens (snappublisher.snapchat.com)

29 Jul 2021 timeline

Snapchat disclosed a bug submitted by apfeifer27
Publicly accessible Continuous Integration Tool

29 Jul 2021 timeline

1 2 3 ... 558

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.