The unofficial HackerOne disclosure Timeline

b'Kubernetes' disclosed a bug submitted by b'jpts'
b'Privilege Escalation in kOps using GCE/GCP Provider'

04 Aug 2023 timeline

b'Nutanix' disclosed a bug submitted by b'tosun'
b'Limited Disclosure: Employee credentials checked in to github (fixed)'

03 Aug 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'vanhoefm'
b'Plaintext leakage of DNS requests in Windows 1.1.1.1 WARP client'

03 Aug 2023 timeline

b'Brave Software' disclosed a bug submitted by b'world_languages'
b'Tor IP leak caused by the PDF Viewer extension in certain situations'

02 Aug 2023 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'XMLRPC does not limit deserializable classes.'

01 Aug 2023 timeline

b'Valve' disclosed a bug submitted by b'g1a55er'
b'Steam Deck Single Click Root Remote Code Execution '

01 Aug 2023 timeline

b'GitHub' disclosed a bug submitted by b'inspector-ambitious'
b'Smuggling content in PR with refs/replace in GitHub'

01 Aug 2023 timeline

b'Sorare' disclosed a bug submitted by b'fixenet'
b'Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains'

01 Aug 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'spaceboy20'
b'bypass two-factor authentication.'

01 Aug 2023 timeline

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137'
b'Apache mod_negotiation filename bruteforcing https://api.ratelimited.me'

01 Aug 2023 timeline

31 Jul 2023 timeline

b'HackerOne' disclosed a bug submitted by b'm0chan'
b'Takeover of hackerone.engineering via Github'

31 Jul 2023 timeline

b'HackerOne' disclosed a bug submitted by b'735t'
b'Register & create a ticket as somebody else on HackerOne Support '

31 Jul 2023 timeline

b'Liberapay' disclosed a bug submitted by b'sameersec'
b'Disavowed an email without any authentication'

31 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'thorsteneckel'
b'Content Security Policy is only active for HTML responses but not for image/svg+xml'

28 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'amartinfraguas'
b'XSS vulnerabilities due to missing checks in tag helpers'

28 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'gquadros_'
b"Argument/Code Injection via ActiveStorage's image transformation functionality"

28 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'meowday'
b'Incorrect handling of certain characters passed to the redirection functionality in Rails can lead to a single-click XSS vulnerability.'

28 Jul 2023 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'ReDoS in Rack::Multipart'

28 Jul 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'selmelc'
b'[curl] CVE-2023-32001: fopen race condition'

27 Jul 2023 timeline

1 ... 107 108 109 110 111 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.