The unofficial HackerOne disclosure Timeline

b'Brave Software' disclosed a bug submitted by b'nishimunea'
b'Brave News feeds can open arbitrary chrome: URLs'

22 Jun 2023 timeline

b'IBM' disclosed a bug submitted by b'ro0od'
b'response manipulation leads to bypass in register at employee website than 0 click account takeover'

21 Jun 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'headhunter'
b'See whos interested in working for your company - security issue'

21 Jun 2023 timeline

b'Node.js' disclosed a bug submitted by b'yadhukrishnam'
b'HTTP Request Smuggling via Empty headers separated by CR'

20 Jun 2023 timeline

b'JetBlue' disclosed a bug submitted by b'qualw1n'
b'XSS via Vuln Rendertron Instance At `.jetblue.com/render/*`'

20 Jun 2023 timeline

b'HackerOne' disclosed a bug submitted by b'medmahmoudi'
b"Improper CSRF token validation allows attackers to access victim's accounts linked to Hackerone"

19 Jun 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'themarkib0x0'
b'Error in Booking an appointment reveals the full path of the website'

18 Jun 2023 timeline

b'Weblate' disclosed a bug submitted by b'mbi3s'
b'Logging in without knowing credentials after logged out action'

16 Jun 2023 timeline

b'Weblate' disclosed a bug submitted by b'mbi3s'
b'CSRF with logout action'

16 Jun 2023 timeline

b'Rocket.Chat' disclosed a bug submitted by b'ondermedia'
b'Clickjacking at open.rocket.chat'

15 Jun 2023 timeline

b'Snapchat' disclosed a bug submitted by b'happytohelp22'
b'internal dev tokens disclosure'

14 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'[CPP]: Add query for CWE-805: Buffer Access with Incorrect Length Value using some functions'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'farid_hunter'
b'[Python]: Timing attack'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs'
b'Go : Add more JWT sinks'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'CPP: Add query for CWE-369: Divide By Zero.'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'heyharya'
b'[python]: Add some dangerous sinks for paramiko ssh clients'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'r3xtwo'
b'[Javascript]: Add new queries for Javascript Github Actions'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'sim4n6'
b'[Python] Unsafe Unpacking and TarSlip bug slaying '

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'sim4n6'
b'[Python] Add Unicode Bypass Validation query tests and help'

13 Jun 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'tyage'
b'JavaScript: Add some new XSS sinks and sources of Next.js (and some extra improvements)'

13 Jun 2023 timeline

1 ... 108 109 110 111 112 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.