The unofficial HackerOne disclosure Timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'Stored XSS on TikTok Live Form'

16 Jun 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'sachinrajput'
b'Rate limit Bypass on contact-us through IP Rotator (burp extension)(https://www.linkedin.com/help/linkedin/solve/contact)'

15 Jun 2022 timeline

b'Twitter' disclosed a bug submitted by b'saiful6601'
b'Delete direct message history without access the proper conversation_id'

15 Jun 2022 timeline

b'Twitter' disclosed a bug submitted by b'max2x'
b"Remote 0click exfiltration of Safari user's IP address"

15 Jun 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'suryasnn'
b'The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more su'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs'
b'Golang : Add Query To Detect PAM Authorization Bugs'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs'
b'Golang : Hardcoded secret used for signing JWT'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory'

15 Jun 2022 timeline

b'UPchieve' disclosed a bug submitted by b'011alsanosi'
b'Hyper Link Injection while signup '

15 Jun 2022 timeline

b'Acronis' disclosed a bug submitted by b'mega7'
b'HTML Injection in E-mail'

14 Jun 2022 timeline

b'Acronis' disclosed a bug submitted by b'ub3rsick'
b'Reflected Cross Site Scripting at ColdFusion Debugging Panel http://www.grouplogic.com/CFIDE/debug/cf_debugFr.cfm'

14 Jun 2022 timeline

b'Acronis' disclosed a bug submitted by b'ub3rsick'
b'Reflected Cross Site Scripting at http://www.grouplogic.com/files/glidownload/verify3.asp [Uppercase Filter Bypass]'

14 Jun 2022 timeline

b'Ruby on Rails' disclosed a bug submitted by b'windshock'
b'Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag'

14 Jun 2022 timeline

b'Showmax' disclosed a bug submitted by b'saidkira'
b'lack of rate limit on athentification login page & forgot password page'

13 Jun 2022 timeline

b'UPchieve' disclosed a bug submitted by b'dark_haxor'
b'All user password hash can be seen from admin panel'

11 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-30115: HSTS bypass via trailing dot'

11 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27780: percent-encoded path separator in URL host'

11 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27779: cookie for trailing dot TLD'

11 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'datph4m'
b'disclosure the live_analytics information of any livestream.'

11 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'noob_but_cut3'
b'Email address disclosure via invite token validatiion'

11 Jun 2022 timeline

1 ... 161 162 163 164 165 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.