The unofficial HackerOne disclosure Timeline

b'GitLab' disclosed a bug submitted by b'asterion04'
b'Account Takeover via Password Reset without user interactions'

26 Feb 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Amazon Comprehend Medical Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

25 Feb 2025 timeline

b'Hemi VDP' disclosed a bug submitted by b'muralidharan_1530'
b'Broken X (Twitter) link on hemi.xyz/about'

25 Feb 2025 timeline

b'Reddit' disclosed a bug submitted by b'la_revoltage'
b'Exposed proxy allows to access internal reddit domains'

24 Feb 2025 timeline

b'MTN Group' disclosed a bug submitted by b'offensiveops'
b'Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/ '

23 Feb 2025 timeline

b'MTN Group' disclosed a bug submitted by b'h0w'
b'CVE-2023-41763 Business Elevation of Privilege vulnerability on [.mtn.com]'

22 Feb 2025 timeline

b'MTN Group' disclosed a bug submitted by b'h0w'
b'Unauthorized access to PII leads to Administrator account Takeover'

22 Feb 2025 timeline

b'WakaTime' disclosed a bug submitted by b'm_kamal'
b'User Email Disclosure via ID-Based Invitation'

22 Feb 2025 timeline

b'Autodesk' disclosed a bug submitted by b'alphahacks'
b'Insecure Direct Object Reference (IDOR) in GraphQL deleteProfileImages Mutation'

21 Feb 2025 timeline

b'Hemi VDP' disclosed a bug submitted by b'ahmednasr1'
b'Sensitive launch.json File Exposed on Public Server'

21 Feb 2025 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschke'
b'Possible to enumerate valid files in password protected shares/files drop shares as well as spam folder with files'

21 Feb 2025 timeline

b'TikTok' disclosed a bug submitted by b'p_oria'
b'IDOR on ads.tiktok.com Allows Unauthorized Product Addition'

20 Feb 2025 timeline

b'Ruby' disclosed a bug submitted by b'l33thaxor'
b'Uncontrolled Resource Consumption when parsing maliciously crafted XML with REXML'

20 Feb 2025 timeline

b'MTN Group' disclosed a bug submitted by b'offensiveops'
b'Unauthenticated phpinfo()files could lead to ability file read at h2f54.n1.ips.mtn.co.ug [/dashboard/]'

20 Feb 2025 timeline

b'curl' disclosed a bug submitted by b'orcahack'
b'Format string vulnerability, curl_msnprintf() function '

20 Feb 2025 timeline

b'Autodesk' disclosed a bug submitted by b'tasin_zucced___'
b'IDOR Vulnerability Allowing Unauthorized Profile Picture Change'

19 Feb 2025 timeline

b'Autodesk' disclosed a bug submitted by b'eyax0'
b'Insecure Direct Object Reference (IDOR) Vulnerability in Autodesk User Profile'

19 Feb 2025 timeline

b'MTN Group' disclosed a bug submitted by b'offensiveops'
b'Cisco IOS XE instance at 41.208.24.174 vulnerable to CVE-2023-20198'

19 Feb 2025 timeline

b'Hemi VDP' disclosed a bug submitted by b'an_gr_y'
b'Linkedin Broken Link Hijacking on https://hemi.xyz/about'

13 Feb 2025 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'oxylis'
b'Applicant security exam Attachments/Documents accessible through an IDOR/BAC on the custom Apex controller on https://.mil '

12 Feb 2025 timeline

1 ... 53 54 55 56 57 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.