The unofficial HackerOne disclosure Timeline

b'Acronis' disclosed a bug submitted by b'mega7'
b'Self XSS in attachments name'

31 May 2022 timeline

b'Alohi' disclosed a bug submitted by b'darkknight4688'
b'Users who are restricted to use the application because of a "Waiting List" are able to get access to the Beta Application by bypassing the waitlist'

30 May 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'piao'
b'CVE-2022-28738: Double free in Regexp compilation'

28 May 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'david_h1'
b'Control character filtering misses leading and trailing whitespace in file and folder names'

27 May 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'qj_test'
b'Notification implicit PendingIntent in com.nextcloud.client allows to access contacts'

27 May 2022 timeline

b'Uber' disclosed a bug submitted by b'ian'
b'Full read SSRF in flyte-poc-us-east4.uberinternal.com'

26 May 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ashutosh7'
b'[Urgent] Critical Vulnerability [RCE] on vulnerable to Remote Code Execution by exploiting MS15-034, CVE-2015-1635'

26 May 2022 timeline

b'U.S. General Services Administration' disclosed a bug submitted by b'hollaatm3'
b'Read Other Users Reports Through Cloning'

26 May 2022 timeline

b'HackerOne' disclosed a bug submitted by b'bugra'
b'Blind XSS in app.pullrequest.com/ via /reviews/ratings/{uuid}'

25 May 2022 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'Stored XSS in Notes (with CSP bypass for gitlab.com)'

25 May 2022 timeline

b'Judge.me ' disclosed a bug submitted by b'caue'
b'Email templates XSS by filterXSS bypass'

25 May 2022 timeline

b'Flickr' disclosed a bug submitted by b'ian'
b'Critical broken cookie signing on dagobah.flickr.com '

24 May 2022 timeline

b'EXNESS' disclosed a bug submitted by b'nearsecurity'
b'[com.exness.android.pa Android] Universal XSS in webview. Lead to steal user cookies'

24 May 2022 timeline

b'Omise' disclosed a bug submitted by b'oblivionlight'
b'Cross-site scripting on dashboard2.omise.co'

24 May 2022 timeline

b'Flickr' disclosed a bug submitted by b'xlord91'
b'Open redirect bypass'

23 May 2022 timeline

b'Flickr' disclosed a bug submitted by b'keer0k'
b'Stored XSS in photos_user_map.gne'

23 May 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'farid_hunter'
b'[python]: Zip Slip Vulnerability'

23 May 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: Flow sources and steps for JMS and RabbitMQ'

23 May 2022 timeline

b'Evernote' disclosed a bug submitted by b'cyberworlcload'
b'Email Verification Bypass by bruteforcing when setting up 2FA'

22 May 2022 timeline

b'Rocket.Chat' disclosed a bug submitted by b'samuelsiv'
b'Possible Domain Takeover on AWS Instance.'

22 May 2022 timeline

1 ... 159 160 161 162 163 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.