The unofficial HackerOne disclosure Timeline

b'Mars' disclosed a bug submitted by b'dr34m14'
b'CSRF to delete a pet on '

05 Feb 2024 timeline

b'HackerOne' disclosed a bug submitted by b'resett3r'
b'Account creation with invalid email addresses / email is accepting % and %0d%0a line termination chars'

04 Feb 2024 timeline

b'HackerOne' disclosed a bug submitted by b'0xacb'
b'HackerOne SAML signup domain enforcement bypass results in unauthorized access to HackerOne PullRequest organization'

04 Feb 2024 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover on one of the subdomain under mozaws.net'

03 Feb 2024 timeline

b'Trellix' disclosed a bug submitted by b'cyb3r_assass1n'
b'Vulnerability Report: NO RATE LIMIT Password RESET'

02 Feb 2024 timeline

b'Trellix' disclosed a bug submitted by b'forcedrofes'
b'default credentials at https://52.42.105.71/'

01 Feb 2024 timeline

b'SideFX' disclosed a bug submitted by b'harshniture12'
b"Port 587 SMPT Open: Can send any mail remotely from the internal mail users to company mail id's."

01 Feb 2024 timeline

b'Infogram' disclosed a bug submitted by b'mr_r3boot'
b'Memory Corruption via Large Pixels'

01 Feb 2024 timeline

b'DuckDuckGo' disclosed a bug submitted by b'mr_r3boot'
b'XSS in Subdomain of DuckDuckGo'

01 Feb 2024 timeline

b'Publitas' disclosed a bug submitted by b'2k_hacker'
b'CORS Misconfiguration on '

31 Jan 2024 timeline

b'curl' disclosed a bug submitted by b'kurohiro'
b'CVE-2024-0853: OCSP verification bypass with TLS session reuse'

31 Jan 2024 timeline

b'Mars' disclosed a bug submitted by b'skoll101'
b'Critical Unauthenticated Access to Sensitive Employee and Customer Data Including Invoice Details at '

30 Jan 2024 timeline

b'Mars' disclosed a bug submitted by b'themarkib0x0'
b'No CSRF protection when adding an item to cart'

30 Jan 2024 timeline

b'Mars' disclosed a bug submitted by b'xandsz'
b'IDOR to account takeover on POST to by changing member_id parameter'

30 Jan 2024 timeline

b'Mars' disclosed a bug submitted by b'm3ntor'
b'Sensitive Information Exposed at '

30 Jan 2024 timeline

30 Jan 2024 timeline

b'HackerOne' disclosed a bug submitted by b'madara_'
b'Server Side Request Forgery (SSRF) in webhook functionality'

30 Jan 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'xer0dayz'
b'CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)'

29 Jan 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'tint0'
b'Argo CD CSRF leads to Kubernetes cluster compromise'

29 Jan 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'zpbrent'
b'Pickle deserialization vulnerability in XComs'

29 Jan 2024 timeline

1 ... 89 90 91 92 93 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.