The unofficial HackerOne disclosure Timeline

b'TikTok' disclosed a bug submitted by b'ashrafabdelrazik'
b'RXSS on TikTok endpoints'

09 Jan 2024 timeline

b'TikTok' disclosed a bug submitted by b'ashrafabdelrazik'
b'RXSS via region parameter'

09 Jan 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'0xt4req'
b'CVE-2023-49920: Apache Airflow: Missing CSRF protection on DAG/trigger'

09 Jan 2024 timeline

b'Hyperledger' disclosed a bug submitted by b'yacovm'
b'CVE-2023-46132'

08 Jan 2024 timeline

b'GitHub' disclosed a bug submitted by b'ahacker1'
b'View Repo and Title of Any Private Check Run'

08 Jan 2024 timeline

b'GitHub' disclosed a bug submitted by b'imrerad'
b'GHES Management console EoP (editor to site admin)'

08 Jan 2024 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'The taint flag is not propagated at JSON.parse'

05 Jan 2024 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'holybugx'
b'Subdomain takeover on one of the subdomain under mozaws.net'

04 Jan 2024 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'holybugx'
b'Subdomain takeover on one of the subdomain under mozaws.net'

04 Jan 2024 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'holybugx'
b'Subdomain takeover on one of the subdomain under mozaws.net'

04 Jan 2024 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'holybugx'
b'Subdomain takeover on one of the subdomain under mozaws.net'

04 Jan 2024 timeline

b'HackerOne' disclosed a bug submitted by b'marvelmaniac'
b'An attacker can submit a Pentest Opportunity and change the status of the opportunity from submitted to in_review or reviewed'

04 Jan 2024 timeline

b'GitHub' disclosed a bug submitted by b'archangel'
b'[PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions'

03 Jan 2024 timeline

b'GitHub' disclosed a bug submitted by b'archangel'
b'[PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission'

03 Jan 2024 timeline

b'TikTok' disclosed a bug submitted by b'sinayeganeh'
b"1 Click to 'Close Account and Refund' via POSTMESSAGE"

03 Jan 2024 timeline

b'Teleport' disclosed a bug submitted by b'technolord1292'
b'Improper session management - Failure to invalidate old session after password change'

02 Jan 2024 timeline

b'curl' disclosed a bug submitted by b'dinesh_b'
b'Buffer Overflow Vulnerability in WebSocket Handling'

02 Jan 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'retr02332'
b'DNS pin middleware can be tricked into DNS rebinding allowing SSRF'

01 Jan 2024 timeline

b'MTN Group' disclosed a bug submitted by b'zer0code'
b'Remote code execution via crafted pentaho report uploaded using default credentials for pentaho business server'

31 Dec 2023 timeline

b'Teleport' disclosed a bug submitted by b'moaz219'
b'access list owner can escalate his role to the highest roles'

29 Dec 2023 timeline

1 ... 92 93 94 95 96 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.