The unofficial HackerOne disclosure Timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'IDOR on TikTok Seller'

16 Aug 2022 timeline

b'TikTok' disclosed a bug submitted by b's3c'
b'CSRF Account Takeover'

16 Aug 2022 timeline

b'Semrush' disclosed a bug submitted by b'a_d_a_m'
b"IDOR allowing to read another user's token on the Social Media Ads service"

16 Aug 2022 timeline

b'Kubernetes' disclosed a bug submitted by b'amlweems'
b'Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces'

13 Aug 2022 timeline

b'Showmax' disclosed a bug submitted by b'miron666'
b'Reflected XSS at https://stories.showmax.com/wp-content/themes/theme-internal_ss/blocks/ajax/a.php via `ss_country_filter` param'

12 Aug 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b's1r1u5'
b'Disabling context isolation, nodeIntegrationInSubFrames using an unauthorised frame.'

11 Aug 2022 timeline

b'Shopify' disclosed a bug submitted by b'0x50d'
b'Admin panel Exposure without credential at https://plus-website.shopifycloud.com/admin.php'

11 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'hammodmt'
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/) '

11 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'fix(security):Path Traversal Bug'

11 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'sohelahmed786'
b'Disable xmlrpc.php file'

11 Aug 2022 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'mr_vrush'
b'Redirection in Repeater & Intruder Tab'

11 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'cet2000'
b'many commands can be manipulated to delete identities or affiliations'

10 Aug 2022 timeline

b'Acronis' disclosed a bug submitted by b'mega7'
b'Read-only administrator can change agent update settings'

10 Aug 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'emanelyazji'
b'[CRITICAL] Full account takeover without user interaction on sign with Apple flow'

09 Aug 2022 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Ability to escape database transaction through SQL injection, leading to arbitrary code execution'

09 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'anonymmert12'
b'xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS)'

08 Aug 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'error2001'
b'Lack of Rate limit while joining video call in talk section which is password protected'

08 Aug 2022 timeline

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137'
b'HTTP PUT method is enabled downloader.ratelimited.me'

07 Aug 2022 timeline

b'Omise' disclosed a bug submitted by b'codeslayer137'
b'Anonymous access control - Payments Status'

07 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'freskimo'
b'RCE vulnerability in Hyperledger Fabric SDK for Java'

06 Aug 2022 timeline

1 ... 148 149 150 151 152 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.