The unofficial HackerOne disclosure Timeline

b'Internet Bug Bounty' disclosed a bug submitted by b's1r1u5'
b'Disabling context isolation, nodeIntegrationInSubFrames using an unauthorised frame.'

11 Aug 2022 timeline

b'Shopify' disclosed a bug submitted by b'0x50d'
b'Admin panel Exposure without credential at https://plus-website.shopifycloud.com/admin.php'

11 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'hammodmt'
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/) '

11 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'fix(security):Path Traversal Bug'

11 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'sohelahmed786'
b'Disable xmlrpc.php file'

11 Aug 2022 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'mr_vrush'
b'Redirection in Repeater & Intruder Tab'

11 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'cet2000'
b'many commands can be manipulated to delete identities or affiliations'

10 Aug 2022 timeline

b'Acronis' disclosed a bug submitted by b'mega7'
b'Read-only administrator can change agent update settings'

10 Aug 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'emanelyazji'
b'[CRITICAL] Full account takeover without user interaction on sign with Apple flow'

09 Aug 2022 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Ability to escape database transaction through SQL injection, leading to arbitrary code execution'

09 Aug 2022 timeline

b'Top Echelon Software' disclosed a bug submitted by b'anonymmert12'
b'xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS)'

08 Aug 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'error2001'
b'Lack of Rate limit while joining video call in talk section which is password protected'

08 Aug 2022 timeline

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137'
b'HTTP PUT method is enabled downloader.ratelimited.me'

07 Aug 2022 timeline

b'Omise' disclosed a bug submitted by b'codeslayer137'
b'Anonymous access control - Payments Status'

07 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'freskimo'
b'RCE vulnerability in Hyperledger Fabric SDK for Java'

06 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'mttrbrts'
b'Enrolling to a CA that returns an empty response crashes the node process'

06 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'xiaoc'
b'Brute Force of fabric-ca server admin account'

06 Aug 2022 timeline

b'MTN Group' disclosed a bug submitted by b'alimanshester'
b'cross site scripting in : mtn.bj'

06 Aug 2022 timeline

b'Kubernetes' disclosed a bug submitted by b'gaffy'
b'Ingress-nginx path allows retrieval of ingress-nginx serviceaccount token'

06 Aug 2022 timeline

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram'
b'Fix : (Security) Mitigate Path Traversal Bug'

05 Aug 2022 timeline

1 ... 153 154 155 156 157 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.