The unofficial HackerOne disclosure Timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4'
b'cd=false (DNSSEC) not respected in DNS over HTTPS JSON requests'

12 Dec 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'ibrahim71192'
b'A vulnerability classified as critical has been found in gsi-openssh-server 7.9p1 on Fedora (Connectivity Software) on server (http://95.217.64.181:22'

10 Dec 2022 timeline

b'Kubernetes' disclosed a bug submitted by b'weinongw'
b'SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30X'

10 Dec 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mik-patient'
b'[nextcloud/server] Moment.js vulnerable to Inefficient Regular Expression Complexity'

09 Dec 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sectex'
b'Insecure use of shell.openExternal() leads to RCE in Rocket.Chat-Desktop'

08 Dec 2022 timeline

b'Sony' disclosed a bug submitted by b'splint3rsec'
b'SQL Injection on []'

07 Dec 2022 timeline

b'Node.js' disclosed a bug submitted by b'haxatron1'
b'DNS rebinding in --inspect via invalid octal IP address'

07 Dec 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'headhunter'
b'Unauthorized access to resumes stored on LinkedIn'

07 Dec 2022 timeline

b'TikTok' disclosed a bug submitted by b'imran_nisar'
b'Ability to change permissions across seller platform'

06 Dec 2022 timeline

b'8x8' disclosed a bug submitted by b'shuvam321'
b'Unprotected Atlantis Server at https://152.70..'

06 Dec 2022 timeline

b'Linktree' disclosed a bug submitted by b'jagata'
b'XSS in linktr.ee - on link thumbnail adding'

06 Dec 2022 timeline

b'EXNESS' disclosed a bug submitted by b'ashwarya'
b'IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT Account '

05 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro'
b'CVE-2022-35260: .netrc parser out-of-bounds access'

03 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'ian'
b'Exposed Cortex API at https://cortex-ingest.shopifycloud.com/'

02 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'robbotic'
b'POST following PUT confusion'

02 Dec 2022 timeline

b'Acronis' disclosed a bug submitted by b'mooimacow'
b'XSS in Acronis Cloud Manager Admin Portal'

02 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'roland_hack'
b'Authentication bypass in https://nin.mtn.ng'

02 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'ashketchum'
b'Stored XSS in /admin/product and /admin/collections'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'attackerbhai'
b'Disconnecting an external login provider does not revoke session'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'Read/Write arbitrary (non-HttpOnly) cookies on checkout pages via GoogleAnalyticsAdditionalScripts postMessage handler'

01 Dec 2022 timeline

1 ... 131 132 133 134 135 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.