The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Unauth IDOR to mass account takeover without user interaction on the (https://.edu/)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xtrav'
b'Self XSS'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:// ()'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (no hostname)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// ()'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https://1 (https://../)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless'
b'HTML Injection into https://www..mil'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'traveler5260'
b'CVE-2023-26347 in https://.mil/hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true'

19 Jul 2024 timeline

b'IBM' disclosed a bug submitted by b'redyetihacks'
b'XSS in IBM InfoCenter'

17 Jul 2024 timeline

b'ExpressionEngine' disclosed a bug submitted by b'maggick'
b'Multiple XSS and open HTTP redirection'

16 Jul 2024 timeline

b'Node.js' disclosed a bug submitted by b'tniessen'
b'Permission model improperly processes UNC paths'

15 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'ID4ME does not validate signature or expiration'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'flood78'
b'Re-emergence of Security Vulnerability in Nextcloud Version 28 Previously Fixed in 25.0.4'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'fernandoenzo'
b'Can reshare read&share only folder with more permissions'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'simcard'
b'Event create can create attachments that link to other websites '

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'juliushaertl'
b'Missing permission check when removing a photo from an album'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'everysinglusernametaken'
b'Ability to by-pass second factor '

14 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'orange'
b'important: Apache HTTP Server weakness with encoded question marks in backreferences (CVE-2024-38474)'

13 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'orange'
b'important: Apache HTTP Server on WIndows UNC SSRF (CVE-2024-38472)'

13 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'orange'
b'important: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (CVE-2024-38475)'

13 Jul 2024 timeline

1 ... 67 68 69 70 71 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.