The unofficial HackerOne disclosure Timeline

b'Rocket.Chat' disclosed a bug submitted by b'sectex'
b'Insecure use of shell.openExternal() leads to RCE in Rocket.Chat-Desktop'

08 Dec 2022 timeline

b'Sony' disclosed a bug submitted by b'splint3rsec'
b'SQL Injection on []'

07 Dec 2022 timeline

b'Node.js' disclosed a bug submitted by b'haxatron1'
b'DNS rebinding in --inspect via invalid octal IP address'

07 Dec 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'headhunter'
b'Unauthorized access to resumes stored on LinkedIn'

07 Dec 2022 timeline

b'TikTok' disclosed a bug submitted by b'imran_nisar'
b'Ability to change permissions across seller platform'

06 Dec 2022 timeline

b'8x8' disclosed a bug submitted by b'shuvam321'
b'Unprotected Atlantis Server at https://152.70..'

06 Dec 2022 timeline

b'Linktree' disclosed a bug submitted by b'jagata'
b'XSS in linktr.ee - on link thumbnail adding'

06 Dec 2022 timeline

b'EXNESS' disclosed a bug submitted by b'ashwarya'
b'IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT Account '

05 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro'
b'CVE-2022-35260: .netrc parser out-of-bounds access'

03 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'ian'
b'Exposed Cortex API at https://cortex-ingest.shopifycloud.com/'

02 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'robbotic'
b'POST following PUT confusion'

02 Dec 2022 timeline

b'Acronis' disclosed a bug submitted by b'mooimacow'
b'XSS in Acronis Cloud Manager Admin Portal'

02 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'roland_hack'
b'Authentication bypass in https://nin.mtn.ng'

02 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'ashketchum'
b'Stored XSS in /admin/product and /admin/collections'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'attackerbhai'
b'Disconnecting an external login provider does not revoke session'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'Read/Write arbitrary (non-HttpOnly) cookies on checkout pages via GoogleAnalyticsAdditionalScripts postMessage handler'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'm7mdharoun'
b'Subdomain Takeover at course.oberlo.com'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'wallotry'
b'Remove Every User, Admin, And Owner Out Of Their Teams on developers.mtn.com via IDOR + Information Disclosure'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'coyemerald'
b'Unprotected Direct Object Reference'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shuvam321'
b'Firebase Database Takeover in https://pulseradio.mtn.co.ug/'

01 Dec 2022 timeline

1 ... 136 137 138 139 140 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.