The unofficial HackerOne disclosure Timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'noentry'
b'CVE-2024-32760 in nginx'

01 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'noentry'
b'CVE-2024-31079 in nginx'

01 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'noentry'
b'CVE-2024-35200 in nginx'

01 Jul 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q'
b'[CVE-2024-32464] ActionText ContentAttachments can Contain Unsanitized HTML'

30 Jun 2024 timeline

b'MercadoLibre' disclosed a bug submitted by b'fr4via'
b'Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection through com.mercadopago.wallet.splash.SplashActivity)'

28 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'martinvw'
b'Subdomain takeover .mil'

27 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Local File Disclosure on the (https://.edu/) leads to the full source code disclosure and credentials leak'

27 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'berserker1999'
b'IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www./Download.aspx?id= [HtUS]'

27 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'b_i_n_i_a_m'
b'sqli on search functionality'

25 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'mkhmd17'
b'Attacker can add two free bags offered by the site at the same time.'

25 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'b_i_n_i_a_m'
b'Sqli on search functionality'

25 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'blax17'
b'Reflected xss on '

25 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'dr34m14'
b'CSRF resulting in adding pet at '

25 Jun 2024 timeline

b'Mars' disclosed a bug submitted by b'haoshokunoo'
b'Account takeover using reset password link'

25 Jun 2024 timeline

b'Booking.com' disclosed a bug submitted by b'jub0bs'
b'Subdomain takeover of ci-support.booking.com (pointing to Zendesk)'

25 Jun 2024 timeline

b'Kubernetes' disclosed a bug submitted by b'jub0bs'
b'monitoring.prow-canary.k8s.io is vulnerable to CVE-2022-21703 (Grafana 0-day)'

25 Jun 2024 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'DoS with crafted "Range" header'

25 Jun 2024 timeline

b'IBM' disclosed a bug submitted by b'samurai_jack0'
b'S3 Bucket Takeover on apptio endpoint'

21 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'ketr0it'
b'Ability to identify actual private from sandboxed programs using link hackerone.com/$handle/terms_acceptance_data.csv'

20 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'maholli'
b'Notes app can be tricked into using a received share created before the user logged in'

19 Jun 2024 timeline

1 ... 70 71 72 73 74 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.