The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'br0x1337'
b'CSRF leads to Account takeover'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'njmulsqb'
b'Sensitive data exposure via /secure/ endpoint on '

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'oxylis'
b'Sensitive data exposure: candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'CSRF Attack on changing security questions leads to full Account TakeOver'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'CSRF Attack leads to delete album at'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'todayisnew-'
b'[ CVE-2018-1000129 ] RXSS At `https://` via the URI'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'k0x'
b'CSRF to XSS'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'k0x'
b'XSS Reflected'

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'CSRF Attack leads to delete album at '

18 Dec 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'moha1sd'
b'Unauthorized Access Exposing Sensitive Data'

18 Dec 2024 timeline

b'LinkedIn' disclosed a bug submitted by b'j0r1an'
b'Forced OAuth authorization using button ID in hash and holding space'

17 Dec 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'd-xuan'
b'X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted files'

15 Dec 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'pulsejet'
b'Incomplete sanitization in SVG preview provider'

15 Dec 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'rullzer'
b'Nextcloud mail does not respect download permissions in shares'

15 Dec 2024 timeline

b'IBM' disclosed a bug submitted by b'facades'
b'Exposed Logs and Bearer Tokens on Test Endpoint'

12 Dec 2024 timeline

b'MercadoLibre' disclosed a bug submitted by b'andresbebe'
b'Es posible poder navegar a cualquier pagina en Point Smart application'

11 Dec 2024 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'netrc + redirect credential leak'

11 Dec 2024 timeline

b'Acronis' disclosed a bug submitted by b'mr-medi'
b'Render content from untrusted sources via web_preview endpoint on Acronis Cloud'

09 Dec 2024 timeline

b'curl' disclosed a bug submitted by b'napol-webug'
b'Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4'

08 Dec 2024 timeline

b'Mozilla' disclosed a bug submitted by b'ebrietas'
b'RCE on worker host due to unsanitized "env" variable name in task definition on community-tc.services.mozilla.com'

08 Dec 2024 timeline

1 ... 57 58 59 60 61 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.