The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'unknownsh'
b'Improper restriction of excessive authentication attempts on WebDAV endpoint '

10 Aug 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'cult'
b'Any (non-admin) user from an instance can destroy any (user and/or global) external filesystem'

10 Aug 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'New AppPassword can be generated without password confirmation'

10 Aug 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'Missing brute force protection on OAuth2 API controller'

10 Aug 2023 timeline

b'HackerOne' disclosed a bug submitted by b'fuzzsqlb0f'
b'Private Email Address Leak of H1 Researchers.'

08 Aug 2023 timeline

b'HackerOne' disclosed a bug submitted by b'japz'
b'Usernames still visible on report export pdf despite "I want to redact all usernames" is selected'

08 Aug 2023 timeline

b'TikTok' disclosed a bug submitted by b'7hamoody1'
b'Dom XSS and open redirect in TikTok seller endpoint'

07 Aug 2023 timeline

b'JFrog' disclosed a bug submitted by b'protector_5512'
b'Impersonation attack via Broken link in "blog-author" page'

06 Aug 2023 timeline

b'WakaTime' disclosed a bug submitted by b'talha828'
b'Waketime Payment Gateway Vulnerability'

05 Aug 2023 timeline

b'Kubernetes' disclosed a bug submitted by b'jpts'
b'Privilege Escalation in kOps using GCE/GCP Provider'

04 Aug 2023 timeline

b'Nutanix' disclosed a bug submitted by b'tosun'
b'Limited Disclosure: Employee credentials checked in to github (fixed)'

03 Aug 2023 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'vanhoefm'
b'Plaintext leakage of DNS requests in Windows 1.1.1.1 WARP client'

03 Aug 2023 timeline

b'Brave Software' disclosed a bug submitted by b'world_languages'
b'Tor IP leak caused by the PDF Viewer extension in certain situations'

02 Aug 2023 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'XMLRPC does not limit deserializable classes.'

01 Aug 2023 timeline

b'Valve' disclosed a bug submitted by b'g1a55er'
b'Steam Deck Single Click Root Remote Code Execution '

01 Aug 2023 timeline

b'GitHub' disclosed a bug submitted by b'inspector-ambitious'
b'Smuggling content in PR with refs/replace in GitHub'

01 Aug 2023 timeline

b'Sorare' disclosed a bug submitted by b'fixenet'
b'Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains'

01 Aug 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'spaceboy20'
b'bypass two-factor authentication.'

01 Aug 2023 timeline

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137'
b'Apache mod_negotiation filename bruteforcing https://api.ratelimited.me'

01 Aug 2023 timeline

31 Jul 2023 timeline

1 ... 108 109 110 111 112 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.