The unofficial HackerOne disclosure Timeline

b'Shopify' disclosed a bug submitted by b'm7mdharoun'
b'Subdomain Takeover at course.oberlo.com'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'wallotry'
b'Remove Every User, Admin, And Owner Out Of Their Teams on developers.mtn.com via IDOR + Information Disclosure'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'coyemerald'
b'Unprotected Direct Object Reference'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shuvam321'
b'Firebase Database Takeover in https://pulseradio.mtn.co.ug/'

01 Dec 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'errorx404'
b'Calendar name length not validated before writing to database'

01 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'bugra'
b'CVE-2022-45402: Apache Airflow: Open redirect during login'

01 Dec 2022 timeline

b'Ian Dunn' disclosed a bug submitted by b'ryotak'
b'Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands'

01 Dec 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'sachin_kumar_'
b'Campaign Account Balance and History Disclosed in API Response'

30 Nov 2022 timeline

b'Yelp' disclosed a bug submitted by b'shubhangirathore836'
b"If the website does not impose additional defense against CSRF attacks, failing to use the 'Lax' or 'Strict' values could increase the risk of exposur"

30 Nov 2022 timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'Stored XSS Payload when sending videos '

29 Nov 2022 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b"Any organization's assets pending review can be downloaded"

29 Nov 2022 timeline

b'Shopify' disclosed a bug submitted by b'kun_19'
b'Stored XSS in Dovetale by application of creator'

29 Nov 2022 timeline

b'AMBER AI' disclosed a bug submitted by b'orange_h'
b'I found some api keys in js files ,huge leak of token addresses and huge amount of js files are not forbidden '

29 Nov 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'benjaoming_realone'
b'potential denial of service attack via the locale parameter'

28 Nov 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shubham_srt'
b'Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]'

27 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'kichernde_erbse'
b'Exception logging in Sharepoint app reveals clear-text connection details'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'bagder'
b'CVE-2022-42915: HTTP proxy double-free'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'robbotic'
b'CVE-2022-32221: POST following PUT confusion'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'Profile of disabled user stays accessible'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'Database resource exhaustion for logged-in users via sharee recommendations with circles'

26 Nov 2022 timeline

1 ... 132 133 134 135 136 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.