The unofficial HackerOne disclosure Timeline

b'Mars' disclosed a bug submitted by b'bx00'
b'**"CSRF Vulnerability in Royal Canin Website Allows Attackers to Change User Profile Picture at my.royalcanin.pt"**'

15 Nov 2023 timeline

b'Automattic' disclosed a bug submitted by b'secureighty'
b'reflected xss in https://wordpress.com/start/account/user'

15 Nov 2023 timeline

b'curl' disclosed a bug submitted by b'cyberguardianrd'
b'Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c'

15 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'rullzer'
b'OAuth2 client_secret stored in plain text in the database'

15 Nov 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'suzuka'
b'Yet Another CASB Integration Takeover of Active Integrations'

13 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'balis0ng'
b'CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dags'

13 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'mikey96'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Password of talk conversations can be bruteforced'

12 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Memcached used as RateLimiter backend is no-op'

12 Nov 2023 timeline

b'Daimler Truck' disclosed a bug submitted by b'1smael0liveira'
b'CSRF + XSS REFLECT'

10 Nov 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'hacker_t_dog'
b'Bypass R2 payment screen'

10 Nov 2023 timeline

10 Nov 2023 timeline

b'ownCloud' disclosed a bug submitted by b'pascal_geuter'
b'Cross-Site Request Forgery '

05 Nov 2023 timeline

b'HackerOne' disclosed a bug submitted by b'bebiks'
b'Google Docs link in JS files allows editing & reading survey information'

04 Nov 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sufatmawati'
b'[] Information disclosure due unauthenticated access to APIs and system browser functions'

03 Nov 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mrr0b0t2324'
b'User automatically logged in as Sys Admin user on https:///Administration/Administration.aspx'

03 Nov 2023 timeline

b'FetLife' disclosed a bug submitted by b'deepblue29'
b'fetlife.com/signup_step_profile expose access_token of mapbox.com'

01 Nov 2023 timeline

b'TikTok' disclosed a bug submitted by b'serverinspector'
b'CRLF injection leads to internal XSS on PangleGlobal'

31 Oct 2023 timeline

1 ... 96 97 98 99 100 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.