The unofficial HackerOne disclosure Timeline

b'Omise' disclosed a bug submitted by b'zombieesshx'
b'Unauthorized Access - downgraded admin roles to none can still edit projects through brupsuite'

01 Jul 2022 timeline

b'Brave Software' disclosed a bug submitted by b'tabaahi'
b'Open redirect found on account.brave.com'

30 Jun 2022 timeline

b'Brave Software' disclosed a bug submitted by b'd3f4u17'
b'Arbitrary file download via "Save .torrent file" option can lead to Client RCE and XSS'

30 Jun 2022 timeline

b'Brave Software' disclosed a bug submitted by b'd3f4u17'
b'Arbitrary file download due to bad handling of Redirects in WebTorrent'

30 Jun 2022 timeline

b'Brave Software' disclosed a bug submitted by b'd3f4u17'
b'Redirecting users to malicious torrent-files/websites using WebTorrent'

30 Jun 2022 timeline

b'Brave Software' disclosed a bug submitted by b'abhinavsecondary'
b'Browser is not following proper flow for redirection cause open redirect '

30 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'XSS Payload on TikTok Seller Center endpoint'

29 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32208: FTP-KRB bad message verification'

27 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32206: HTTP compression denial of service'

27 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32205: Set-Cookie denial of service'

27 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32207: Unpreserved file permissions'

27 Jun 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'Unauthorized Access to Internal Server Panel without Authentication'

27 Jun 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mdakh404'
b'Reflected XSS via `` parameter'

27 Jun 2022 timeline

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'bombon'
b'Bypassing Cache Deception Armor using .avif extension file'

27 Jun 2022 timeline

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4'
b'Sign in with Apple works on existing accounts, bypasses 2FA'

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'sainaen'
b'API docs expose an active token for the sample domain theburritobot.com'

27 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'windshock'
b'Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32205: Set-Cookie denial of service'

27 Jun 2022 timeline

1 ... 159 160 161 162 163 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.