The unofficial HackerOne disclosure Timeline

b'Kindred Group' disclosed a bug submitted by b'sw33tlie'
b'[www.32red.com] Reverse proxy misconfiguration leads to 1-click account takeover'

03 Apr 2023 timeline

b'Kindred Group' disclosed a bug submitted by b'fransrosen'
b'Full Account Takeover on *.unibet.com due to crossdomain.xml and AkamaiPlayer loaderContext'

03 Apr 2023 timeline

b'Kindred Group' disclosed a bug submitted by b'naaash'
b'[unibet.com] Delete messages via IDOR at /mom-api/messages/unibet_@unibet/'

03 Apr 2023 timeline

b'8x8 Bounty' disclosed a bug submitted by b'bababounty99'
b'Dangling DNS Record docs.jitsi.net (unsuccessful GSuite takeover)'

03 Apr 2023 timeline

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'bombon'
b'Cache Deception Allows Account Takeover'

01 Apr 2023 timeline

01 Apr 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'gregxsunday'
b'[ruby]: ZipSlip/TarSlip vulnerability detection'

31 Mar 2023 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'maikypedia'
b'[Ruby]: Server Side Template Injection'

31 Mar 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'devokta'
b'Twitter Account hijack @nextcloudfrance'

30 Mar 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'bohwaz'
b'the complete server installation path is visible in cloud/user endpoint'

30 Mar 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'gorei'
b'Insecure randomness for default password in file sharing when password policy app is disabled'

30 Mar 2023 timeline

b'Nextcloud' disclosed a bug submitted by b'rullzer'
b'Secure view trivial to bypass'

30 Mar 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'timon8'
b'CRLF Injection in Nodejs undici via host'

29 Mar 2023 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'mj0nes-vsat'
b'CVE-2023-23919: Multiple OpenSSL error handling issues in nodejs crypto library'

29 Mar 2023 timeline

b'LinkedIn' disclosed a bug submitted by b'tushar6378'
b'Unauthorized User can View Subscribers of Other Users Newsletters'

29 Mar 2023 timeline

b'LINE' disclosed a bug submitted by b'yinmo'
b'iOS group chat denial of service'

29 Mar 2023 timeline

b'ExpressionEngine' disclosed a bug submitted by b'karezma'
b'PHP Object injection -> Building Custom Gadget chain -> RCE '

28 Mar 2023 timeline

b'LINE' disclosed a bug submitted by b'rioncool22'
b'Stored XSS Via Filename On https://partners.line.me/'

28 Mar 2023 timeline

b'LINE' disclosed a bug submitted by b'tosun'
b'Debugging panel exposure'

28 Mar 2023 timeline

b'LINE' disclosed a bug submitted by b'tosun'
b'Path traversal in a Tomcat server'

28 Mar 2023 timeline

1 ... 122 123 124 125 126 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.