The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'z2_'
b'CVE-2024-6197: freeing stack buffer in utf8asn1str'

24 Jul 2024 timeline

b'curl' disclosed a bug submitted by b'z2_'
b'CVE-2024-6874: macidn punycode buffer overread'

24 Jul 2024 timeline

b'GitHub' disclosed a bug submitted by b'ahacker1'
b'View private repository NWO of deploy key via internal LFS API'

23 Jul 2024 timeline

b'MercadoLibre' disclosed a bug submitted by b'madara_'
b'Reflected Cross Site Scripting'

23 Jul 2024 timeline

b'HackerOne' disclosed a bug submitted by b'tedix'
b'Payload delivery via Social Media urls on H1 profile'

23 Jul 2024 timeline

b'HackerOne' disclosed a bug submitted by b'akashhamal0x01'
b'Non Org Admin/Group Manager can create groups in an organization'

23 Jul 2024 timeline

b'HackerOne' disclosed a bug submitted by b'iam_srpk'
b'Minor security issue with Hackerone Invitations from sandbox program'

22 Jul 2024 timeline

b'Nintendo' disclosed a bug submitted by b'lnchan'
b'Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secrets'

22 Jul 2024 timeline

b'TikTok' disclosed a bug submitted by b'696e746c6f6c'
b'Exploitable live argument in onClick Function leads to Data Leakage of Inactive/Suspended Products'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg'
b'Authentication Bypass on https:///'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'IDOR leads to PII Leak'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'IDOR leads to view other user Biographical details (Possible PII LEAK)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'IDOR : Modify other users demographic details'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg'
b'Automatic Admin Access'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg'
b'Endpoint Redirects to Admin Page and Provides Admin role'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tokyoenigma'
b'Local File Inclusion in download.php'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian'
b'XML External Entity (XXE) Injection'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'Email Takeover leads to permanent account deletion'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01'
b'Restrict any user from Login to their account'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg'
b'Missing Access Control Allows for User Creation and Privilege Escalation '

19 Jul 2024 timeline

1 ... 72 73 74 75 76 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.