The unofficial HackerOne disclosure Timeline

Acronis disclosed a bug submitted by adr
Arbitrary DLL injection in mmsminisrv (Acronis Managed Machine Service Mini)

20 Oct 2020 timeline

Acronis disclosed a bug submitted by f_m
DOM based XSS in store.acronis.com/<id>/purl-corporate-standard-IT [cfg parameter]

20 Oct 2020 timeline

Visma Public disclosed a bug submitted by zeop
HTTP Request Smuggling at app.workbox.dk

20 Oct 2020 timeline

GitHub Security Lab disclosed a bug submitted by someone
Java: CWE-749 Unsafe resource loading in Android WebView leaking to injection attacks

19 Oct 2020 timeline

Zivver disclosed a bug submitted by nikolat3sla
Two-factor authentication can be disabled when logged in without 2fa or password confirmation

19 Oct 2020 timeline

Node.js third-party modules disclosed a bug submitted by gkmr
[json8-merge-patch] Prototype Pollution

18 Oct 2020 timeline

Node.js disclosed a bug submitted by underflow0
Slowloris, body parsing

17 Oct 2020 timeline

Node.js disclosed a bug submitted by shogunpanda
Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests

17 Oct 2020 timeline

Node.js disclosed a bug submitted by ashi009
`fs.realpath.native` on darwin may cause buffer overflow

17 Oct 2020 timeline

Node.js disclosed a bug submitted by amitklein
HTTP Request Smuggling due to CR-to-Hyphen conversion

17 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by hassanshahid
https://?????? vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by r4d1kal
Sensitive data exposure via https://????????.mil/secure/QueryComponent!Default.jspa - CVE-2020-14179

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by mzfr
[CVE-2020-3452] Unauthenticated file read in Cisco ASA

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by arm4nd0
[??????????.mil] Cisco VPN Service Path Traversal

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by yassinek3ch
[SQLI ]Time Bassed Injection at ?????????? via referer header

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by x3ph_
External Service Interaction | https://?????????.mil

16 Oct 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by dhakal_bibek
CSRF to account takeover in https://???????.mil/

16 Oct 2020 timeline

Solana BBP disclosed a bug submitted by daniel1895
Heap memory can be accessible through metrics.solana.com

16 Oct 2020 timeline

Solana BBP disclosed a bug submitted by daniel1895
Buffer can be readable through Debug on metrics.solana.com

16 Oct 2020 timeline

1 2 3 ... 476

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.