The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2023-46218: cookie mixed case PSL bypass'

06 Dec 2023 timeline

b'GitHub' disclosed a bug submitted by b'inspector-ambitious'
b'Rogue collaborators and ambiguous branch names in GitHub'

05 Dec 2023 timeline

b'IBM' disclosed a bug submitted by b'sajidraza'
b'Unauthenticated Remote Access to Testing Endpoint'

04 Dec 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen'
b'Integrity checks according to policies can be circumvented in Node.js 20 and Node.js 18'

30 Nov 2023 timeline

b'Tennessee Valley Authority' disclosed a bug submitted by b'mohs3n'
b'access to profile & reset password page without authentication'

30 Nov 2023 timeline

b'Tennessee Valley Authority' disclosed a bug submitted by b'mohs3n'
b'captcha bypass leads to register multiple user with one valid captcha'

30 Nov 2023 timeline

b'Tennessee Valley Authority' disclosed a bug submitted by b'mohs3n'
b'internal path disclosure via register error'

30 Nov 2023 timeline

b'Tennessee Valley Authority' disclosed a bug submitted by b'mohs3n'
b'Incorrect Authorization leads to see other users Documents Uploaded'

30 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen'
b'Permission model improperly protects against path traversal in Node.js 20'

30 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'mattaustin'
b'Permissions policies can be bypassed via Module._load and require.extensions (High) (CVE-2023-30587)'

30 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'0xt4req'
b'CVE-2023-47037: Airflow Broken Access Control Vulnerability'

29 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'mprogrammer'
b'CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows'

29 Nov 2023 timeline

b'GitHub' disclosed a bug submitted by b'inspector-ambitious'
b'Git Reference Ambiguity in GitHub - Commit Smuggling, Account Takeover, and Remote Code Execution'

29 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'balis0ng'
b'CVE-2023-42780: Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature'

29 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'klexadoc'
b'Secrets can be unmasked in the "Rendered Template"'

29 Nov 2023 timeline

b'Mozilla Critical Services' disclosed a bug submitted by b'yakirka'
b'Mozilla FuzzManager API Token Exposed in Git Commit'

29 Nov 2023 timeline

b'Tor' disclosed a bug submitted by b'newfunction'
b'Potential IP revealing using UNC Path in Windows File Picker'

28 Nov 2023 timeline

b'Tor' disclosed a bug submitted by b'wiloos'
b'SQL Injection in parameter REPORT'

28 Nov 2023 timeline

b'Tor' disclosed a bug submitted by b'geeknik'
b'Use of unitialized value in crypto_pk_num_bits (src/common/crypto.c:971)'

28 Nov 2023 timeline

b'Tor' disclosed a bug submitted by b'zerx'
b'Zip bomb'

28 Nov 2023 timeline

1 ... 95 96 97 98 99 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.