The unofficial HackerOne disclosure Timeline

b'Aiven Ltd' disclosed a bug submitted by b'jarij'
b'Kafka Connect RCE via connector SASL JAAS JndiLoginModule configuration'

08 Nov 2022 timeline

b'Aiven Ltd' disclosed a bug submitted by b'jarij'
b'Grafana RCE via SMTP server parameter injection'

08 Nov 2022 timeline

b'Aiven Ltd' disclosed a bug submitted by b'jarij'
b'[Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia'

08 Nov 2022 timeline

b'Yelp' disclosed a bug submitted by b'xinfohuggerx'
b'Public Github Repo Leaking Internal Credentials '

07 Nov 2022 timeline

b'TikTok' disclosed a bug submitted by b'daik0n'
b'Subdomain Takeover via Unclaimed Amazon S3 Bucket (Musical.ly)'

07 Nov 2022 timeline

b'Flickr' disclosed a bug submitted by b'0xcyborg'
b'Exceed photo dimensions, Flickr.com'

07 Nov 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion'
b'I found another way to bypass Cloudflare Warp lock!'

07 Nov 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion'
b'Bypass Cloudflare WARP lock on iOS.'

07 Nov 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion'
b'Completely remove VPN profile from locked WARP iOS cient.'

07 Nov 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-35252: control code in cookie denial of service'

05 Nov 2022 timeline

b'Acronis' disclosed a bug submitted by b'mr-medi'
b'CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud'

04 Nov 2022 timeline

b'GitLab' disclosed a bug submitted by b'legit-security'
b'DOS via issue preview'

04 Nov 2022 timeline

b'GitLab' disclosed a bug submitted by b'otoyyy'
b'Path paths and file disclosure vulnerabilities at influxdb.quality.gitlab.net'

04 Nov 2022 timeline

b'GitLab' disclosed a bug submitted by b'legit-security'
b'DOS via move_issue'

04 Nov 2022 timeline

b'GitLab' disclosed a bug submitted by b'vakzz'
b'RepositoryPipeline allows importing of local git repos'

04 Nov 2022 timeline

b'GitHub' disclosed a bug submitted by b'jupenur'
b'Command injection in GitHub Actions ContainerStepHost'

03 Nov 2022 timeline

b'Automattic' disclosed a bug submitted by b'apapedulimu'
b'Archived / Deleted / Private Poll Can Be Viewed by Another Users [Crowdsignal WordPress plugins]'

03 Nov 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro'
b'CVE-2022-42916: HSTS bypass via IDN'

03 Nov 2022 timeline

b'Automattic' disclosed a bug submitted by b'bugra'
b'Stored XSS in intensedebate.com via the Comments RSS '

02 Nov 2022 timeline

b'Automattic' disclosed a bug submitted by b'bugra'
b'IDOR in API applications (able to see any API token, leads to account takeover)'

01 Nov 2022 timeline

1 ... 135 136 137 138 139 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.