The unofficial HackerOne disclosure Timeline

b'Hyperledger' disclosed a bug submitted by b'xiaoc'
b'Brute Force of fabric-ca server admin account'

06 Aug 2022 timeline

b'MTN Group' disclosed a bug submitted by b'alimanshester'
b'cross site scripting in : mtn.bj'

06 Aug 2022 timeline

b'Kubernetes' disclosed a bug submitted by b'gaffy'
b'Ingress-nginx path allows retrieval of ingress-nginx serviceaccount token'

06 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'Fix : (Security) Mitigate Path Traversal Bug'

05 Aug 2022 timeline

b'Reddit' disclosed a bug submitted by b'high_ping_ninja'
b'Getting access of mod logs from any public or restricted subreddit with IDOR vulnerability'

04 Aug 2022 timeline

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj'
b'Unauthenticated Private Messages DIsclosure via wordpress Rest API'

04 Aug 2022 timeline

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj'
b'Sensei LMS IDOR to send message'

04 Aug 2022 timeline

b'TikTok' disclosed a bug submitted by b'mrzheev'
b'Unrestricted File Upload Blind Stored Xss in subdomain ads.tiktok.com'

04 Aug 2022 timeline

b'Reddit' disclosed a bug submitted by b'keer0k'
b'XSS in redditmedia.com can compromise data of reddit.com'

03 Aug 2022 timeline

b'Reddit' disclosed a bug submitted by b'fransrosen'
b'One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.com'

02 Aug 2022 timeline

b'GitLab' disclosed a bug submitted by b'm-narayanan'
b"Found Origin IP's lead to access to gitlab"

02 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'Insecure TLS Configuration #3530'

01 Aug 2022 timeline

b'Showmax' disclosed a bug submitted by b'qualwin38000'
b'delete the subaccount from the user id'

01 Aug 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'baltpeter'
b'Insecure use of shell.openExternal() in Rocket.Chat Desktop App leading to RCE'

01 Aug 2022 timeline

b'Judge.me ' disclosed a bug submitted by b'netboom'
b'Race condition on https://judge.me/people'

01 Aug 2022 timeline

b'GoCD' disclosed a bug submitted by b'khalidou'
b'Open S3 Bucket Accessible by any Aws User'

31 Jul 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'Corsa Site Scripting Vulnerability (XSS)'

30 Jul 2022 timeline

b'MTN Group' disclosed a bug submitted by b'vulnera'
b'Open redirection at https://smartreports.mtncameroon.net'

30 Jul 2022 timeline

b'Phabricator' disclosed a bug submitted by b'dyls'
b'Possible to make restricted files public on Phabricator via Diffusion'

29 Jul 2022 timeline

b'Dropbox' disclosed a bug submitted by b'sayaanalam'
b"Send Fax from Anyone's HelloFax Account Due to Misconfigured Email Validation"

29 Jul 2022 timeline

1 ... 149 150 151 152 153 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.