The unofficial HackerOne disclosure Timeline

b'HackerOne' disclosed a bug submitted by b'fuzzsqlb0f'
b'Private Email Address Leak of H1 Researchers.'

08 Aug 2023 timeline

b'HackerOne' disclosed a bug submitted by b'japz'
b'Usernames still visible on report export pdf despite "I want to redact all usernames" is selected'

08 Aug 2023 timeline

b'TikTok' disclosed a bug submitted by b'7hamoody1'
b'Dom XSS and open redirect in TikTok seller endpoint'

07 Aug 2023 timeline

b'JFrog' disclosed a bug submitted by b'protector_5512'
b'Impersonation attack via Broken link in "blog-author" page'

06 Aug 2023 timeline

b'WakaTime' disclosed a bug submitted by b'talha828'
b'Waketime Payment Gateway Vulnerability'

05 Aug 2023 timeline

b'Kubernetes' disclosed a bug submitted by b'jpts'
b'Privilege Escalation in kOps using GCE/GCP Provider'

04 Aug 2023 timeline

b'Nutanix' disclosed a bug submitted by b'tosun'
b'Limited Disclosure: Employee credentials checked in to github (fixed)'

03 Aug 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'vanhoefm'
b'Plaintext leakage of DNS requests in Windows 1.1.1.1 WARP client'

03 Aug 2023 timeline

b'Brave Software' disclosed a bug submitted by b'world_languages'
b'Tor IP leak caused by the PDF Viewer extension in certain situations'

02 Aug 2023 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'XMLRPC does not limit deserializable classes.'

01 Aug 2023 timeline

b'Valve' disclosed a bug submitted by b'g1a55er'
b'Steam Deck Single Click Root Remote Code Execution '

01 Aug 2023 timeline

b'GitHub' disclosed a bug submitted by b'inspector-ambitious'
b'Smuggling content in PR with refs/replace in GitHub'

01 Aug 2023 timeline

b'Sorare' disclosed a bug submitted by b'fixenet'
b'Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains'

01 Aug 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'spaceboy20'
b'bypass two-factor authentication.'

01 Aug 2023 timeline

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137'
b'Apache mod_negotiation filename bruteforcing https://api.ratelimited.me'

01 Aug 2023 timeline

31 Jul 2023 timeline

b'HackerOne' disclosed a bug submitted by b'm0chan'
b'Takeover of hackerone.engineering via Github'

31 Jul 2023 timeline

b'HackerOne' disclosed a bug submitted by b'735t'
b'Register & create a ticket as somebody else on HackerOne Support '

31 Jul 2023 timeline

b'Liberapay' disclosed a bug submitted by b'sameersec'
b'Disavowed an email without any authentication'

31 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'thorsteneckel'
b'Content Security Policy is only active for HTML responses but not for image/svg+xml'

28 Jul 2023 timeline

1 ... 102 103 104 105 106 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.