The unofficial HackerOne disclosure Timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'[CPP]: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch'

05 Oct 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ydvanjali'
b'Bypass two-factor authentication'

04 Oct 2022 timeline

b'Reddit' disclosed a bug submitted by b'ahacker1'
b"Reddit talk promotion offers don't expire, allowing users to accept them after being demoted"

03 Oct 2022 timeline

b'Informatica' disclosed a bug submitted by b'isumitpatel'
b'jira discloser information '

03 Oct 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'bjoernv'
b'Generated passwords are not fully validated by HIBPValidator'

01 Oct 2022 timeline

b'TikTok' disclosed a bug submitted by b'ckerha'
b'Bypassing authorization of linked Instagram account'

30 Sep 2022 timeline

b'Reddit' disclosed a bug submitted by b'lu3ky-13'
b'Open Redirect on www.redditinc.com via `failed` query param bypass after fixed bug #1257753'

30 Sep 2022 timeline

b'Reddit' disclosed a bug submitted by b'criptex'
b'IDOR allows an attacker to modify the links of any user'

30 Sep 2022 timeline

b'Reddit' disclosed a bug submitted by b'heckintosh'
b'Unrestricted File Upload on reddit.secure.force.com'

30 Sep 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'path_network'
b'Lack of Packet Sanitation in Goflow Results in Multiple DoS Attack Vectors and Bugs'

30 Sep 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'lohigowda'
b'Password Policy Restriction Bypass'

30 Sep 2022 timeline

b'Flickr' disclosed a bug submitted by b'stevejubs'
b'Open Redirect'

29 Sep 2022 timeline

b'Yelp' disclosed a bug submitted by b'irfadps'
b'no rate limit in forgot password session'

29 Sep 2022 timeline

b'Judge.me ' disclosed a bug submitted by b'penguinshelp'
b'XSS in Widget Review Form Preview in settings'

29 Sep 2022 timeline

b'Slack' disclosed a bug submitted by b'security_warrior'
b'CSV export/import functionality allows administrators to modify member and message content of a workspace'

28 Sep 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen'
b'Take over subdomains of r2.dev using R2 custom domains'

28 Sep 2022 timeline

b'Node.js' disclosed a bug submitted by b'zeyu2001'
b'DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices)'

28 Sep 2022 timeline

b'Yelp' disclosed a bug submitted by b'raja404'
b'Server-side request forgery (ssrf)'

28 Sep 2022 timeline

b'8x8' disclosed a bug submitted by b'rajauzairabdullah'
b'Directory Listing vulnerability on .packet8.net/php/include/'

28 Sep 2022 timeline

b'Yelp' disclosed a bug submitted by b'qualwin3001'
b'CORS Misconfiguration on Yelp'

28 Sep 2022 timeline

1 ... 145 146 147 148 149 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.