The unofficial HackerOne disclosure Timeline

b'Acronis' disclosed a bug submitted by b'mooimacow'
b'XSS in Acronis Cloud Manager Admin Portal'

02 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'roland_hack'
b'Authentication bypass in https://nin.mtn.ng'

02 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'ashketchum'
b'Stored XSS in /admin/product and /admin/collections'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'attackerbhai'
b'Disconnecting an external login provider does not revoke session'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'bored-engineer'
b'Read/Write arbitrary (non-HttpOnly) cookies on checkout pages via GoogleAnalyticsAdditionalScripts postMessage handler'

01 Dec 2022 timeline

b'Shopify' disclosed a bug submitted by b'm7mdharoun'
b'Subdomain Takeover at course.oberlo.com'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'wallotry'
b'Remove Every User, Admin, And Owner Out Of Their Teams on developers.mtn.com via IDOR + Information Disclosure'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'coyemerald'
b'Unprotected Direct Object Reference'

01 Dec 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shuvam321'
b'Firebase Database Takeover in https://pulseradio.mtn.co.ug/'

01 Dec 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'errorx404'
b'Calendar name length not validated before writing to database'

01 Dec 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'bugra'
b'CVE-2022-45402: Apache Airflow: Open redirect during login'

01 Dec 2022 timeline

b'Ian Dunn' disclosed a bug submitted by b'ryotak'
b'Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands'

01 Dec 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'sachin_kumar_'
b'Campaign Account Balance and History Disclosed in API Response'

30 Nov 2022 timeline

b'Yelp' disclosed a bug submitted by b'shubhangirathore836'
b"If the website does not impose additional defense against CSRF attacks, failing to use the 'Lax' or 'Strict' values could increase the risk of exposur"

30 Nov 2022 timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'Stored XSS Payload when sending videos '

29 Nov 2022 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b"Any organization's assets pending review can be downloaded"

29 Nov 2022 timeline

b'Shopify' disclosed a bug submitted by b'kun_19'
b'Stored XSS in Dovetale by application of creator'

29 Nov 2022 timeline

b'AMBER AI' disclosed a bug submitted by b'orange_h'
b'I found some api keys in js files ,huge leak of token addresses and huge amount of js files are not forbidden '

29 Nov 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'benjaoming_realone'
b'potential denial of service attack via the locale parameter'

28 Nov 2022 timeline

b'MTN Group' disclosed a bug submitted by b'shubham_srt'
b'Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]'

27 Nov 2022 timeline

1 ... 138 139 140 141 142 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.