The unofficial HackerOne disclosure Timeline

b'MTN Group' disclosed a bug submitted by b'tinopreter'
b'SQL injection in URL path leads to Database Access'

08 Jan 2025 timeline

b'MTN Group' disclosed a bug submitted by b'tinopreter'
b'OTP code Leaked in API Response '

08 Jan 2025 timeline

b'Mozilla' disclosed a bug submitted by b'jabiyev'
b'Denial of Access to Static Resources via Cache Poisoning on addons.allizom.org'

08 Jan 2025 timeline

b'Mozilla' disclosed a bug submitted by b'dotxml'
b'Bypass Email Verification on Add Email Monitoring'

07 Jan 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb'
b'Apache Airflow: Sensitive Information Exposure in DAG Run Logs'

30 Dec 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb'
b'Secrets not masked in UI when sensitive variables are set via Airflow cli'

30 Dec 2024 timeline

b'Truecaller ' disclosed a bug submitted by b'marcotuliocnd'
b'Lack of URL Validation in avatarUrl at /v4/profile'

28 Dec 2024 timeline

b'Acronis' disclosed a bug submitted by b'darkdream'
b'[oem.acronis.com] Reflected Cross Site Scripting '

28 Dec 2024 timeline

b'AWS VDP' disclosed a bug submitted by b'zolaer9527'
b'A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.'

27 Dec 2024 timeline

b'curl' disclosed a bug submitted by b'scottarterbury'
b'Hackers Attack Curl Vulnerability Accessing Sensitive Information'

27 Dec 2024 timeline

b'MTN Group' disclosed a bug submitted by b'nhx1'
b'DOM Based Reflected Cross Site Scripting'

25 Dec 2024 timeline

b'MTN Group' disclosed a bug submitted by b'nhx1'
b'Information disclosure via enabled Django Debug Mode '

25 Dec 2024 timeline

b'MTN Group' disclosed a bug submitted by b'nhx1'
b'Improper Access Control leaks OTPs sent to all phone numbers'

25 Dec 2024 timeline

b'AWS VDP' disclosed a bug submitted by b'perigou'
b'Reflected XSS on Amazon EC2 Instance'

24 Dec 2024 timeline

b'AWS VDP' disclosed a bug submitted by b'perigou'
b'CVE-2020-5902 '

24 Dec 2024 timeline

b'HackerOne' disclosed a bug submitted by b'sarthakbhingare015'
b'Access to limited confidential information of private program as a Ex-reporter, Report Participant(external user) & Ex-staff member'

24 Dec 2024 timeline

b'Basecamp' disclosed a bug submitted by b'mrm0nk'
b'Bypass "Upgrade To Add Project" Restriction in Free Account To Create Multiple Projects Without Upgrading '

20 Dec 2024 timeline

b'curl' disclosed a bug submitted by b'hackeriron1'
b'bypass of this Fixed #2437131 [ Inadequate Protocol Restriction Enforcement in curl ]'

19 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shuvam321'
b' Remote Code Execution and AWS IAM Credentials Exfiltration in https:///'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'br0x1337'
b'CSRF leads to Account takeover'

18 Dec 2024 timeline

1 ... 56 57 58 59 60 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.