The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Unauthenticated arbitrary file upload on the https:/// (.mil)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'matrixsoftsec'
b'Unauthenticated access to internal API at..edu [HtUS]'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'XXE with RCE potential on the https:// (CVE-2017-3548)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Authentication bypass and potential RCE on the https:// due to exposed Cisco TelePresence SX80 with default credentials'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Unauth IDOR to mass account takeover without user interaction on the (https://.edu/)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xtrav'
b'Self XSS'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:// ()'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (no hostname)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// ()'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https://1 (https://../)'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless'
b'HTML Injection into https://www..mil'

19 Jul 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'traveler5260'
b'CVE-2023-26347 in https://.mil/hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true'

19 Jul 2024 timeline

b'IBM' disclosed a bug submitted by b'redyetihacks'
b'XSS in IBM InfoCenter'

17 Jul 2024 timeline

b'ExpressionEngine' disclosed a bug submitted by b'maggick'
b'Multiple XSS and open HTTP redirection'

16 Jul 2024 timeline

b'Node.js' disclosed a bug submitted by b'tniessen'
b'Permission model improperly processes UNC paths'

15 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'ID4ME does not validate signature or expiration'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'flood78'
b'Re-emergence of Security Vulnerability in Nextcloud Version 28 Previously Fixed in 25.0.4'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'fernandoenzo'
b'Can reshare read&share only folder with more permissions'

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'simcard'
b'Event create can create attachments that link to other websites '

14 Jul 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'juliushaertl'
b'Missing permission check when removing a photo from an album'

14 Jul 2024 timeline

1 ... 14 15 16 17 18 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.