The unofficial HackerOne disclosure Timeline

Razer disclosed a bug submitted by s3cr3tsdn
Expired reCAPTCHA site key leads to Rate Limit Bypass and Email Enumeration

04 Mar 2020 timeline

Razer disclosed a bug submitted by s3cr3tsdn
Reflected XSS at https://sea-web.gold.razer.com/cash-card/verify via channel parameter

04 Mar 2020 timeline

NordVPN disclosed a bug submitted by archerl
Reduced Payment amount while paying on Crypto Currencies

03 Mar 2020 timeline

NordVPN disclosed a bug submitted by mickeymouse001
UI Redressing (Clickjacking) vulnerability

03 Mar 2020 timeline

NordVPN disclosed a bug submitted by 01alsanosi
Sensitive Information Disclosure on https://nordvpn.com/

03 Mar 2020 timeline

disclosed a bug submitted by arinerron2
Directory Traversal in uftpd 2.6-2.10

03 Mar 2020 timeline

New Relic disclosed a bug submitted by ashmek
CRLF Injection in email address

03 Mar 2020 timeline

GitHub Security Lab disclosed a bug submitted by jlleitschuh
Java (Maven): Actually fix the use of insecure protocol to download/upload artifacts

03 Mar 2020 timeline

New Relic disclosed a bug submitted by ashishkataria
Bypassing Protection Mechanism: Change of Account Name after Session Log out

02 Mar 2020 timeline

Visma Bug Bounty Program disclosed a bug submitted by m0chan
Unrestricted file upload when creating quotes allows for Stored XSS

02 Mar 2020 timeline

Showmax disclosed a bug submitted by ahmadbrainworks
Open Redirect in secure.showmax.com

02 Mar 2020 timeline

Node.js third-party modules disclosed a bug submitted by eslam-shieldfy
Server Side Request Forgery in Uppy npm module

02 Mar 2020 timeline

Nextcloud disclosed a bug submitted by ayid
Disabled user can reset their password

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by ayid
Nextcloud 10.0 privilege escalation issue - Normal user can mask external storage shared by admin

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by ayid
**minor issue ** -Nextcloud 10.0 session issue with desktop client and android client

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by maprambo
Password of failed (2FA) login attempt is stored in log

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by dalt
Delete All Data of Any User

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by xuesheng
Access to all files of remote user through shared file

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by julzify
WebDAV Empty Property search leads to full CPU usage

01 Mar 2020 timeline

Nextcloud disclosed a bug submitted by myster
Broken link for wrong domain entry may be leveraged for Phishing, Misinformation, Serving Malware

01 Mar 2020 timeline

1 ... 7 8 9 10 11 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.