The unofficial HackerOne disclosure Timeline

b'HackerOne' disclosed a bug submitted by b'bebiks'
b'Google Docs link in JS files allows editing & reading survey information'

04 Nov 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sufatmawati'
b'[] Information disclosure due unauthenticated access to APIs and system browser functions'

03 Nov 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mrr0b0t2324'
b'User automatically logged in as Sys Admin user on https:///Administration/Administration.aspx'

03 Nov 2023 timeline

b'FetLife' disclosed a bug submitted by b'deepblue29'
b'fetlife.com/signup_step_profile expose access_token of mapbox.com'

01 Nov 2023 timeline

b'TikTok' disclosed a bug submitted by b'serverinspector'
b'CRLF injection leads to internal XSS on PangleGlobal'

31 Oct 2023 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'rexifylo'
b'Title: Deceptive Manipulation of HTTP to HTTPS with VPN in Burp Suite'

31 Oct 2023 timeline

b'8x8 Bounty' disclosed a bug submitted by b'pentestor'
b'Stored xss at https://.8x8.com/api//ID'

30 Oct 2023 timeline

b'phpBB' disclosed a bug submitted by b'shin24'
b'Authenticated path traversal to Stored XSS and Denial-of-Service'

29 Oct 2023 timeline

b'HackerOne' disclosed a bug submitted by b'light3r'
b'Bypass report submit restriction/ban using the API key'

29 Oct 2023 timeline

28 Oct 2023 timeline

b'Rockstar Games' disclosed a bug submitted by b'sirr0n'
b'Password and mail address stored unencrypted in memory - Rockstar Game Launcher'

27 Oct 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'happyhacking123'
b'CVE-2023-40611: Apache Airflow Dag Runs Broken Access Control Vulnerability'

27 Oct 2023 timeline

b'Glassdoor' disclosed a bug submitted by b'frankcadillac'
b'Unauthorized Access to Deleted Interviews on Glassdoor Platform'

27 Oct 2023 timeline

b'Urban Dictionary' disclosed a bug submitted by b'flashdisk'
b'Race condition in up voting and down voting'

27 Oct 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'astrounder'
b'Possibility of Deface through translation tool - www.mozilla.com'

27 Oct 2023 timeline

b'Kubernetes' disclosed a bug submitted by b'ginoah'
b'RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path field'

26 Oct 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'm4y4nk'
b'Flickr API key leaked in GitHub commit'

26 Oct 2023 timeline

b'HackerOne' disclosed a bug submitted by b'bebiks'
b'Unreleased Hackerone Copilot is vulnerable to IDOR'

25 Oct 2023 timeline

b'Kubernetes' disclosed a bug submitted by b'jkroepke'
b'Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotation'

25 Oct 2023 timeline

b'Lark Technologies' disclosed a bug submitted by b'kongwenbin'
b'Improper Access Control allows OTP bypass'

25 Oct 2023 timeline

1 ... 98 99 100 101 102 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.