The unofficial HackerOne disclosure Timeline

b'Rocket.Chat' disclosed a bug submitted by b'paulocsanz'
b'REST API gets `query` as parameter and executes it'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'rolfzur'
b'Unintended information disclosure in the Hubot Log files'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'dago_669'
b'Bypass local authentication (PIN code)'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'gronke'
b'getUserMentionsByChannel leaks messages with mention from private channel'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'garretby'
b'It is possible to elevate privileges for any authenticated user to view permissions matrix and view Direct messages without appropriate permissions.'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'danieljpp'
b'Persistent CSS injection with marked markdown parser in Rocket.Chat'

22 Sep 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'ghaem51'
b'Regex account takeover'

22 Sep 2022 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'XSS in ZenTao integration affecting self hosted instances without strict CSP'

22 Sep 2022 timeline

b'8x8' disclosed a bug submitted by b'is-'
b'DLL Search-Order Hijacking Vulnerability in work-64-exe-v7.16.3-1.exe'

22 Sep 2022 timeline

b'TikTok' disclosed a bug submitted by b'datph4m'
b'Add products to any livestream.'

21 Sep 2022 timeline

b'TikTok' disclosed a bug submitted by b'datph4m'
b'Create product discounts of any shop'

21 Sep 2022 timeline

b'PlayStation' disclosed a bug submitted by b'theflow0'
b'size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drives'

21 Sep 2022 timeline

b'Mattermost' disclosed a bug submitted by b'catenacyber'
b'DOS: out of memory from gif through upload api'

21 Sep 2022 timeline

b'TikTok' disclosed a bug submitted by b'apapedulimu'
b'IDOR on Tagged People'

20 Sep 2022 timeline

b'PlayStation' disclosed a bug submitted by b'theflow0'
b'Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)'

20 Sep 2022 timeline

b'Vanilla' disclosed a bug submitted by b'admin0x00'
b'CORS Misconfiguration on vanillaforums.com '

20 Sep 2022 timeline

b'MTN Group' disclosed a bug submitted by b'sachinrajput'
b'There is no rate limit for SME REGISTRATION PORTAL'

19 Sep 2022 timeline

b'HackerOne' disclosed a bug submitted by b'mega7'
b'HTML Injection in email via Name field'

18 Sep 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'Airflow Daemon Mode Insecure Umask Privilege Escalation'

17 Sep 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'seifelsallamy'
b'XSS in www.glassdoor.com'

16 Sep 2022 timeline

1 ... 147 148 149 150 151 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.