The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless'
b'XSS vulnerability found in javascript code of https://.mil'

24 Jan 2025 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless'
b'XSS found in https://www..mil'

24 Jan 2025 timeline

b'XVIDEOS' disclosed a bug submitted by b'chse_'
b'Stored XSS via SMTP Error Message'

24 Jan 2025 timeline

b'IBM' disclosed a bug submitted by b'youssifs7'
b'POST based Cross-Site Scripting on IBM research endpoint'

23 Jan 2025 timeline

b'Node.js' disclosed a bug submitted by b'parrot409'
b'Usage of unsafe random function in undici for choosing boundary'

23 Jan 2025 timeline

b'Mozilla' disclosed a bug submitted by b'0d_amrr'
b' Bypass Email verification for monitoring at `monitor.mozilla.org`'

22 Jan 2025 timeline

b'Node.js' disclosed a bug submitted by b'leodog896'
b'Worker permission bypass via InternalWorker leak in diagnostics'

21 Jan 2025 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Disclosing PolicyPageAssetGroup in Private Programs via /graphql `gid://hackerone/PolicyPageAssetGroupsIndex::PolicyPageAssetGroup/{id}`'

21 Jan 2025 timeline

b'Yelp' disclosed a bug submitted by b'mester_x'
b"Object Level access control leads to reading user's full requests, sessions, and error messages"

18 Jan 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'leixiao'
b'CVE-2022-40604: Apache Airflow: Format String Vulnerability'

18 Jan 2025 timeline

b'Brave Software' disclosed a bug submitted by b'syarif07'
b" Incorrect security UI of files' download source on brave MacOS"

16 Jan 2025 timeline

b'XVIDEOS' disclosed a bug submitted by b'nagu123'
b'Lack of Rate Limiting on Account Creation Endpoint '

16 Jan 2025 timeline

b'Cosmos' disclosed a bug submitted by b'julianor'
b'Attacker can use any non-enabled capability'

15 Jan 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'netrc and redirect credential leak'

15 Jan 2025 timeline

b'Flickr' disclosed a bug submitted by b'himu_xjjj'
b'Information Disclosure: .dockerignore file is publicly accessible'

14 Jan 2025 timeline

b'Basecamp' disclosed a bug submitted by b'shezxi'
b'Critical Data Breach - Big Data for all domains'

14 Jan 2025 timeline

b'Nextcloud' disclosed a bug submitted by b'offensiveops'
b'Blind SSRF Vulnerability in Appstore Release Upload Form'

14 Jan 2025 timeline

b'Doppler' disclosed a bug submitted by b'clubbable'
b'WAF bypass and java script incomplete handling of Unicode characters might leads to dom-xss'

13 Jan 2025 timeline

b'Trellix' disclosed a bug submitted by b'r4v'
b'Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10'

12 Jan 2025 timeline

b'MTN Group' disclosed a bug submitted by b'tinopreter'
b'Yet Another OTP code Leaked in the API Response'

08 Jan 2025 timeline

1 ... 55 56 57 58 59 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.