The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'Unauthorized Access to Internal Server Panel without Authentication'

27 Jun 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mdakh404'
b'Reflected XSS via `` parameter'

27 Jun 2022 timeline

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'bombon'
b'Bypassing Cache Deception Armor using .avif extension file'

27 Jun 2022 timeline

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4'
b'Sign in with Apple works on existing accounts, bypasses 2FA'

27 Jun 2022 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'sainaen'
b'API docs expose an active token for the sample domain theburritobot.com'

27 Jun 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'windshock'
b'Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32205: Set-Cookie denial of service'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32206: HTTP compression denial of service'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32207: Unpreserved file permissions'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-32208: FTP-KRB bad message verification'

27 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'chen172'
b'Credential leak when use two url'

27 Jun 2022 timeline

b'Phabricator' disclosed a bug submitted by b'foobar7'
b'User can link non-public file attachments, leading to file disclose on edit by higher-privileged user'

26 Jun 2022 timeline

b'GitLab' disclosed a bug submitted by b'thypon'
b'Bypass for Domain-level redirects (Unvalidated Redirects and Forwar)'

22 Jun 2022 timeline

b'Reddit' disclosed a bug submitted by b'bisesh'
b'Able to approve admin approval and change effective status without adding payment details . '

22 Jun 2022 timeline

b'Alohi' disclosed a bug submitted by b'zeesozee'
b'Weak rate limit for SIGN.PLUS email verification'

21 Jun 2022 timeline

b'Krisp' disclosed a bug submitted by b'yassineaboukir'
b'Authentication CSRF resulting in unauthorized account access on Krisp app'

20 Jun 2022 timeline

b'Krisp' disclosed a bug submitted by b'life__001'
b'Add more seats by paying less via PUT /v2/seats request manipulation'

20 Jun 2022 timeline

b'UPS VDP' disclosed a bug submitted by b'7odamo'
b'Admin Authentication Bypass Lead to Admin Account Takeover '

20 Jun 2022 timeline

1 ... 161 162 163 164 165 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.