The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tdaddy'
b'Unathenticated file read (CVE-2020-3452) '

17 Nov 2023 timeline

b'Snowplow' disclosed a bug submitted by b'reefspek'
b'Unauthorised CocoaPods Auth via Token Leakage & HTTP Header Injection'

16 Nov 2023 timeline

b'FetLife' disclosed a bug submitted by b'deepblue29'
b'Able to see highest poll result without voting or view result'

15 Nov 2023 timeline

b'Mars' disclosed a bug submitted by b'skoll101'
b'debug.log File Exposure that exposes (user/) username and password at '

15 Nov 2023 timeline

b'Mars' disclosed a bug submitted by b'skoll101'
b'subdomain takeover at '

15 Nov 2023 timeline

b'Mars' disclosed a bug submitted by b'bx00'
b'**"CSRF Vulnerability in Royal Canin Website Allows Attackers to Change User Profile Picture at my.royalcanin.pt"**'

15 Nov 2023 timeline

b'Automattic' disclosed a bug submitted by b'secureighty'
b'reflected xss in https://wordpress.com/start/account/user'

15 Nov 2023 timeline

b'curl' disclosed a bug submitted by b'cyberguardianrd'
b'Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c'

15 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'rullzer'
b'OAuth2 client_secret stored in plain text in the database'

15 Nov 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'suzuka'
b'Yet Another CASB Integration Takeover of Active Integrations'

13 Nov 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'balis0ng'
b'CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dags'

13 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'mikey96'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Password of talk conversations can be bruteforced'

12 Nov 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Memcached used as RateLimiter backend is no-op'

12 Nov 2023 timeline

b'Daimler Truck' disclosed a bug submitted by b'1smael0liveira'
b'CSRF + XSS REFLECT'

10 Nov 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'hacker_t_dog'
b'Bypass R2 payment screen'

10 Nov 2023 timeline

10 Nov 2023 timeline

b'ownCloud' disclosed a bug submitted by b'pascal_geuter'
b'Cross-Site Request Forgery '

05 Nov 2023 timeline

1 ... 97 98 99 100 101 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.