The unofficial HackerOne disclosure Timeline

Automattic disclosed a bug submitted by ajay_saycure
Able to comment/view in others support ticket at https://en.instagram-brand.com/requests/dashboard

05 Dec 2020 timeline

curl disclosed a bug submitted by 1wc
An integer overflow found in /lib/urlapi.c

05 Dec 2020 timeline

curl disclosed a bug submitted by snsn
curl overwrite local file with -J

05 Dec 2020 timeline

curl disclosed a bug submitted by mszpl
Partial password leak over DNS on HTTP redirect

05 Dec 2020 timeline

OpenVPN disclosed a bug submitted by jub0bs
Some build dependencies are downloaded over an insecure channel (without subsequent integrity checks)

04 Dec 2020 timeline

PlayStation disclosed a bug submitted by parsiya
Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' Application

04 Dec 2020 timeline

Stripo Inc disclosed a bug submitted by binit
Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo

04 Dec 2020 timeline

Basecamp disclosed a bug submitted by babykeem
SSL expired subdomain leads to API swap with main and flagged cookies. Unable to log device ids and certain session tokens.

03 Dec 2020 timeline

Mail.ru disclosed a bug submitted by jayesh25
Improper Restriction of Excessive Authentication Attempts at https://ucs.ru/login

03 Dec 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by al-madjus
Leaked DB credentials on https://.mil/

03 Dec 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nagli
CSRF to Stored HTML injection at https://www.

03 Dec 2020 timeline

U.S. Dept Of Defense disclosed a bug submitted by nagli
PII Leak of USCG Designated Examiner List at https://www.

03 Dec 2020 timeline

Kubernetes disclosed a bug submitted by kittytrace
Development Application Credentials + Information Exposed

03 Dec 2020 timeline

Basecamp disclosed a bug submitted by foobar7
Bypass of image rewriting / tracking blocker via srcset

03 Dec 2020 timeline

Automattic disclosed a bug submitted by haqsek2
Email Verification bypass on signup

03 Dec 2020 timeline

Kubernetes disclosed a bug submitted by piqin
csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVC

03 Dec 2020 timeline

Node.js third-party modules disclosed a bug submitted by asgerf
[chart.js] Prototype pollution

02 Dec 2020 timeline

Mail.ru disclosed a bug submitted by alexeysergeevich
stored xss + .

02 Dec 2020 timeline

Mail.ru disclosed a bug submitted by act1on3
[smena.samokat.ru] Predictable JWT secret

02 Dec 2020 timeline

1 2 3 ... 490

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.