The unofficial HackerOne disclosure Timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover of eideticker.mozilla.org'

04 Oct 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing'
b'Subdomain takeover of google-cdn-delivery.dev.mozaws.net'

04 Oct 2023 timeline

b'inDrive' disclosed a bug submitted by b'h1xploit'
b'Bypassing Garbage Collection with Uppercase Endpoint'

04 Oct 2023 timeline

b'LY Corporation' disclosed a bug submitted by b'tosun'
b'Reflected XSS in OAUTH2 login flow (https://access.line.me)'

04 Oct 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'mattaustin'
b'CVE-2023-30587 Process-based permissions can be bypassed with the "inspector" module.'

30 Sep 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'find_me_here'
b'Attackers can create unlimited jobs by paying a low price `( Rp. 10,000 )` from the original lowest price of around **Rp 93,151**'

29 Sep 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'unexpectedbuffercon_'
b'[] Information disclosure due unauthenticated access to APIs and system browser functions'

29 Sep 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'xandsz'
b'authentication bypass'

29 Sep 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'testingforbugs'
b'Reflected XSS at https:///'

29 Sep 2023 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'unexpectedbuffercon_'
b'[] Reflected XSS via Keycloak on '

29 Sep 2023 timeline

b'Mattermost' disclosed a bug submitted by b'zerodivisi0n'
b'Reflected XSS in OAuth complete endpoints'

28 Sep 2023 timeline

b'Liberapay' disclosed a bug submitted by b'ma_hunter'
b' Twitter account hijack @Costalfy'

27 Sep 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'selmelc'
b'[curl] CVE-2023-38039: HTTP header allocation DOS'

27 Sep 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'mikey96'
b'Subdomain Takeover on mozaws.net'

27 Sep 2023 timeline

b'Mozilla Core Services' disclosed a bug submitted by b'unexpectedbuffercon_'
b'Missing Function Level Access Control in Mozilla formula containsRegular Expression Denial of Service (CVE-2023-25166)'

27 Sep 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'themarkib0x0'
b'Existance of calendars and addressbooks can be checked by unauthenticated users '

26 Sep 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'cyber_world_01'
b'No Rate Limit On Forgot Password on https://apps.nextcloud.com'

26 Sep 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'shuvam321'
b'Nextcloud All-In-One path disclosure of internal frontend'

26 Sep 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'krrish_hackk'
b'Dos in Form Submission at https://nextcloud.com/instant-trial/'

26 Sep 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'find_me_here'
b'Can VIEW Videos on LinkedIn Learning that Require a Subscription Without having to Subscribe Via `SHARE features`'

25 Sep 2023 timeline

1 ... 100 101 102 103 104 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.