The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'errorx404'
b'Calendar name length not validated before writing to database'

01 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'bugra'
b'CVE-2022-45402: Apache Airflow: Open redirect during login'

01 Dec 2022 timeline

b'Ian Dunn' disclosed a bug submitted by b'ryotak'
b'Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands'

01 Dec 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'sachin_kumar_'
b'Campaign Account Balance and History Disclosed in API Response'

30 Nov 2022 timeline

b'Yelp' disclosed a bug submitted by b'shubhangirathore836'
b"If the website does not impose additional defense against CSRF attacks, failing to use the 'Lax' or 'Strict' values could increase the risk of exposur"

30 Nov 2022 timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'Stored XSS Payload when sending videos '

29 Nov 2022 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b"Any organization's assets pending review can be downloaded"

29 Nov 2022 timeline

b'Shopify' disclosed a bug submitted by b'kun_19'
b'Stored XSS in Dovetale by application of creator'

29 Nov 2022 timeline

b'AMBER AI' disclosed a bug submitted by b'orange_h'
b'I found some api keys in js files ,huge leak of token addresses and huge amount of js files are not forbidden '

29 Nov 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'benjaoming_realone'
b'potential denial of service attack via the locale parameter'

28 Nov 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shubham_srt'
b'Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]'

27 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'kichernde_erbse'
b'Exception logging in Sharepoint app reveals clear-text connection details'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'bagder'
b'CVE-2022-42915: HTTP proxy double-free'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'robbotic'
b'CVE-2022-32221: POST following PUT confusion'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'Profile of disabled user stays accessible'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'Database resource exhaustion for logged-in users via sharee recommendations with circles'

26 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'SSRF mitigation bypass using DNS Rebind attack'

25 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'open redirect to a remote website which can phish users'

25 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'SSRF - pivoting in the private LAN'

25 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikeisastar'
b'XSS in Desktop Client in call notification popup'

25 Nov 2022 timeline

1 ... 137 138 139 140 141 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.