The unofficial HackerOne disclosure Timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27780: percent-encoded path separator in URL host'

11 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27779: cookie for trailing dot TLD'

11 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'datph4m'
b'disclosure the live_analytics information of any livestream.'

11 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'noob_but_cut3'
b'Email address disclosure via invite token validatiion'

11 Jun 2022 timeline

b'PlayStation' disclosed a bug submitted by b'theflow0'
b'bd-j exploit chain'

10 Jun 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tmz900'
b'RXSS on '

10 Jun 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'Moderator can enable cam/mic remotely if cam/mic-permission was disabled while user has activated cam/mic'

09 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'ddme'
b'Integer overflows in unescape_word()'

09 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'maslahhunter'
b'match'

09 Jun 2022 timeline

b'Reddit' disclosed a bug submitted by b'3amii'
b'Several Subdomains Takeover'

08 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'ooooooo_q'
b"XSS by clicking Jira's link"

08 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'ehhthing'
b'Gitlab Pages token theft using service workers'

08 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'"External status checks" can be accepted by users below developer access if the user is either author or assignee of the target merge request'

08 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'jarij'
b'Stored XSS on issue comments and other pages which contain notes'

08 Jun 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'0x7'
b'Reflected XSS on https://www.glassdoor.com/parts/header.htm'

08 Jun 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'0x7'
b'Reflected XSS on https://help.glassdoor.com/gd_requestsubmitpage'

08 Jun 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'0x7'
b'Open redirect on https://www.glassdoor.com/profile/siwa.htm via state parameter'

08 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'saltyyolk'
b'Path traversal, to RCE'

07 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'saltyyolk'
b'Steal private objects of other projects via project import'

07 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'saltyyolk'
b'Private objects exposed through project import'

07 Jun 2022 timeline

1 ... 157 158 159 160 161 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.