The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'tomorrowisnew_'
b'SSRF via potential filter bypass with too lax local domain checking'

16 Sep 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'daniel_calvino_sanchez'
b'Last video frame is still sent after video is disabled in a call'

16 Sep 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'ro0telqayser'
b'Information exposure in in guzzlehttp/guzzle (https://github.com/nextcloud/3rdparty/tree/master/guzzlehttp/guzzle)'

16 Sep 2022 timeline

b'Shopify' disclosed a bug submitted by b'xenx'
b'store internal email disclosed through shopify-data-exporter '

15 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl'
b'[hta3] Remote Code Execution on https:// via improper access control to SCORM Zip upload/import'

15 Sep 2022 timeline

b'Linktree' disclosed a bug submitted by b'bug_vs_me'
b'No validation to Image upload user can upload ( php APK zip files and can be used as storage purpose)'

15 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shreky'
b'STORED XSS in /nlc/login.aspx via "edit" GET parameter through markdown editor [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'malcolmx'
b'time based SQL injection at [https://] [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'malcolmx'
b'SQL injection at [] [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'malcolmx'
b'SQL injection at [https://] [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'codeprivate'
b'SSRF in Functional Administrative Support Tool pdf generator () [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmed0x0mahmoud'
b'an internel important paths disclosure [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sudi'
b'Full read SSRF at [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'byteone'
b'Unprotected and Test site API Exposes Documents, Credentials, and Emails in Proposal System'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xr3dhunt'
b'SSRF ACCESS AWS METADATA - '

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bate5a'
b'IDOR Lead To VIEW & DELETE & Create api_key [HtUS]'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shuvam321'
b'XSS DUE TO CVE-2022-38463 in https://'

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless'
b'springboot actuator is leaking internals at '

14 Sep 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x45'
b'Directory Traversal at '

14 Sep 2022 timeline

b'Meredith' disclosed a bug submitted by b'error201'
b"Shop - Reflected XSS With Clickjacking Leads to Steal User's Cookie In Two Domain"

14 Sep 2022 timeline

1 ... 148 149 150 151 152 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.