The unofficial HackerOne disclosure Timeline

b'Elastic' disclosed a bug submitted by b'lu3ky-13'
b'blind Server-Side Request Forgery (SSRF) allows scanning internal ports'

05 May 2023 timeline

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'bombon'
b'Reflected XSS Via origCity Parameter (UPPER Case + WAF Protection Bypass)'

04 May 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'meinereiner'
b'App pin of the Android app can be bypassed via 3rdparty apps generating deep links'

04 May 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'Potential directory traversal in OC\\Files\\Node\\Folder::getFullPath'

04 May 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'juliushaertl'
b'Document content of files can be obtained through Collabora for files of other users'

04 May 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'juliushaertl'
b'Hide download previews are accessible without a watermark'

04 May 2023 timeline

b'Ruby' disclosed a bug submitted by b'leixiao'
b'Header CRLF Injection in Ruby Net::HTTP'

04 May 2023 timeline

b'HackerOne' disclosed a bug submitted by b'datph4m'
b'Insecure Direct Object Reference (IDOR) - Delete Campaigns '

03 May 2023 timeline

b'TD Bank' disclosed a bug submitted by b'def1ant'
b'Reflected XSS on marketsandresearch.td.com'

03 May 2023 timeline

b'Stripe' disclosed a bug submitted by b'saajanbhujel'
b'Possible XSS vulnerability without a content security bypass'

01 May 2023 timeline

b'Stripe' disclosed a bug submitted by b'saajanbhujel'
b'XSS vulnerability without a content security bypass in a `CUSTOM` App through Button tag'

01 May 2023 timeline

b'Fastly VDP' disclosed a bug submitted by b'rubayet_hassan'
b'Unauthenticated cache purging'

01 May 2023 timeline

b'Fastly VDP' disclosed a bug submitted by b'xerhakhd'
b'Cache purge requests are not authenticated'

01 May 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'brthnc'
b'Reference fetch can saturate the server bandwidth for 10 seconds'

29 Apr 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'aslfv'
b'Name collision of shared folders'

29 Apr 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'qualw1n'
b'Information disclosure by sending a GIF'

28 Apr 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'Desktop client does not verify received singed certificate in end to end encryption'

27 Apr 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'das7pad'
b'Possible DoS Vulnerability in Multipart MIME parsing in rack'

27 Apr 2023 timeline

b'Hyperledger' disclosed a bug submitted by b'kmhlyxj0'
b'[indy_node]POOL_UPGRADE command injection, Trustee Node can execute command in any other Node`s system.'

27 Apr 2023 timeline

b'8x8' disclosed a bug submitted by b'pentestor'
b'Credential leak on GitHub: https://github.com/// (Peoplesoft CRM)'

27 Apr 2023 timeline

1 ... 118 119 120 121 122 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.