The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'stux3net08'
b'Denial of Service in curl Request - HTTP headers eat all memory'

18 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'mohs3n'
b'see card comments after remove shared board'

18 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'akashhamal0x01'
b'Access Control Vulnerability Enabling Unauthorized Access to Limited Disclosure Reports'

17 Jun 2024 timeline

b'Mozilla' disclosed a bug submitted by b'erdy'
b'Account deletion using the /v1/account/destroy API endpoint using account password without 2FA verification'

17 Jun 2024 timeline

b'Drugs.com' disclosed a bug submitted by b'akhan8041'
b'Email OTP/2FA Bypass'

16 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'section1'
b'Events information leaked with shared calendars on recurrence exceptions'

14 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'7h3b4dg3r'
b'Read-only users can restore old versions'

14 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'lourcode'
b'Code injection in Nextcloud Desktop Client for macOS'

14 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'nagli'
b'[Spot Check] - Ability to disclose metadata about Spot Checks (Number of Hackers + Hackers Criteria) via "SpotCheckSingleQuery"'

11 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'youstin'
b"[ Spot Check ] Team members can edit a user's write-up"

06 Jun 2024 timeline

b'EXNESS' disclosed a bug submitted by b'alexandrio'
b'GraphQL attribute Batching DOS can take down pwapi.ex2b.com'

04 Jun 2024 timeline

b'WakaTime' disclosed a bug submitted by b'hasn0x'
b'IDOR to view order information of users and personal information'

02 Jun 2024 timeline

b'Basecamp' disclosed a bug submitted by b'fr4via'
b'Account takeover via insecure intent handling '

30 May 2024 timeline

b'HackerOne' disclosed a bug submitted by b'zy9ard3'
b"[hackerone.com] Program's old handles are not blacklisted like usernames and allows reclaim over past handles for potential abuse"

30 May 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschke'
b'user_oidc allows registering new accounts by going through ID4Me flow'

30 May 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'iylz'
b'Proxy-Authorization header not cleared on cross-origin redirect in undici.request'

29 May 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen'
b'Path traversal by monkey-patching Buffer internals'

29 May 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen'
b'Improper handling of wildcards in --allow-fs-read and --allow-fs-write'

29 May 2024 timeline

b'ExpressionEngine' disclosed a bug submitted by b'd3addog'
b'Non-authenticated path traversal leading to arbitrary file read '

28 May 2024 timeline

b'ExpressionEngine' disclosed a bug submitted by b'd0bby'
b'Import/Convert user file exposure leading to logins/passwords/PII leak. '

28 May 2024 timeline

1 ... 72 73 74 75 76 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.