The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32206: HTTP compression denial of service'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32207: Unpreserved file permissions'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32208: FTP-KRB bad message verification'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'chen172'
b'Credential leak when use two url'

27 Jun 2022 timeline

b'Phabricator' disclosed a bug submitted by b'foobar7'
b'User can link non-public file attachments, leading to file disclose on edit by higher-privileged user'

26 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'thypon'
b'Bypass for Domain-level redirects (Unvalidated Redirects and Forwar)'

22 Jun 2022 timeline

b'Reddit' disclosed a bug submitted by b'bisesh'
b'Able to approve admin approval and change effective status without adding payment details . '

22 Jun 2022 timeline

b'Alohi' disclosed a bug submitted by b'zeesozee'
b'Weak rate limit for SIGN.PLUS email verification'

21 Jun 2022 timeline

b'Krisp' disclosed a bug submitted by b'yassineaboukir'
b'Authentication CSRF resulting in unauthorized account access on Krisp app'

20 Jun 2022 timeline

b'Krisp' disclosed a bug submitted by b'life__001'
b'Add more seats by paying less via PUT /v2/seats request manipulation'

20 Jun 2022 timeline

b'UPS VDP' disclosed a bug submitted by b'7odamo'
b'Admin Authentication Bypass Lead to Admin Account Takeover '

20 Jun 2022 timeline

b'Enjin' disclosed a bug submitted by b'whiteshadow201'
b'Authentication token and CSRF token bypass'

19 Jun 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'bypass forced password protection via circles app'

19 Jun 2022 timeline

b'UPS VDP' disclosed a bug submitted by b'nayefhamouda'
b'Broken access control '

18 Jun 2022 timeline

b'IBM' disclosed a bug submitted by b'exploitmsf'
b'sql injection via https://setup.p2p.ihost.com/'

17 Jun 2022 timeline

b'Enjin' disclosed a bug submitted by b'er_salil'
b'CSRF Bypassed on Logout Endpoint'

17 Jun 2022 timeline

b'Enjin' disclosed a bug submitted by b'akashhamal0x01'
b'Race condition via project team member invitation system.'

17 Jun 2022 timeline

b'Yelp' disclosed a bug submitted by b'happykira0x1'
b'xmlrpc file enabled'

16 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'iylz'
b'curl "globbing" can lead to denial of service attacks'

16 Jun 2022 timeline

b'Reddit' disclosed a bug submitted by b'marvelmaniac'
b'CSRF (protection bypassed) to force a below 18 user into viewing an nsfw subreddit !'

16 Jun 2022 timeline

1 ... 160 161 162 163 164 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.