The unofficial HackerOne disclosure Timeline

b'Hemi VDP' disclosed a bug submitted by b'aaravhex'
b'Cloudflare WAF Bypass - Origin IP Exposure'

27 Mar 2025 timeline

b'Shopify' disclosed a bug submitted by b'ooooooo_q'
b'HTTP Response Header Injection in shopify/pitchfork + Rack 3'

27 Mar 2025 timeline

b'Brave Software' disclosed a bug submitted by b'canalun'
b'Null Pointer Dereference by Crafted Response from AI Model'

26 Mar 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

24 Mar 2025 timeline

b'Autodesk' disclosed a bug submitted by b'yunxohang'
b'Twitter broken link hijacking in thewild.com'

24 Mar 2025 timeline

b'Trendyol' disclosed a bug submitted by b'samark19'
b'Cache Poisoning Allows Zero Interaction Store XSS'

22 Mar 2025 timeline

b'Shopify' disclosed a bug submitted by b'samux'
b'Limited Privilege User Can Create Unauthorized Referrals on partners.shopify.com'

20 Mar 2025 timeline

b'Autodesk' disclosed a bug submitted by b'metereorpreter'
b'SSRF in Autodesk Rendering leading to account takeover'

18 Mar 2025 timeline

b'Autodesk' disclosed a bug submitted by b'khoof'
b'Django Debug Mode Enabled - Information Disclosure on api.wwm-dev.autodesk.com'

18 Mar 2025 timeline

b'Nextcloud' disclosed a bug submitted by b'vulnerability_is_here'
b'Sensitive Information Disclosure via Back Button Post Logout on https://apps.nextcloud.com/account/'

16 Mar 2025 timeline

b'Drugs.com' disclosed a bug submitted by b'dedoxd2'
b'2FA Bypass leads to impersonation of legimate users'

14 Mar 2025 timeline

b'Autodesk' disclosed a bug submitted by b'the-white-evil'
b'Stored Cross-Site Scripting found in custom integration app on https://admin.b360.autodesk.com.'

14 Mar 2025 timeline

b'MercadoLibre' disclosed a bug submitted by b'elmago'
b'Stored Cross-Site Scripting in mercadopago.com.ar'

13 Mar 2025 timeline

b'HackerOne' disclosed a bug submitted by b'sarthakbhingare015'
b'Domain highlighting on External link warning is not working on Chrome & Microsoft Edge browsers on Mobile'

13 Mar 2025 timeline

13 Mar 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

11 Mar 2025 timeline

b'Urban Dictionary' disclosed a bug submitted by b'osama-hamad'
b'CSRF to Reflected XSS at echo.urbandictionary.biz via spoofing content type'

11 Mar 2025 timeline

b'Shopify' disclosed a bug submitted by b'kun_19'
b'Account Takeover Vulnerability in Shopify Collabs Platform Due to Missing Email Verification'

11 Mar 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'stonksy'
b'Deadlock in x86 HVM standard VGA handling'

07 Mar 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'scyoon'
b'Possible ReDoS vulnerability in query parameter filtering in Action Dispatch'

07 Mar 2025 timeline

1 ... 50 51 52 53 54 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.