The unofficial HackerOne disclosure Timeline

b'Enjin' disclosed a bug submitted by b'whiteshadow201'
b'Authentication token and CSRF token bypass'

19 Jun 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'bypass forced password protection via circles app'

19 Jun 2022 timeline

b'UPS VDP' disclosed a bug submitted by b'nayefhamouda'
b'Broken access control '

18 Jun 2022 timeline

b'IBM' disclosed a bug submitted by b'exploitmsf'
b'sql injection via https://setup.p2p.ihost.com/'

17 Jun 2022 timeline

b'Enjin' disclosed a bug submitted by b'er_salil'
b'CSRF Bypassed on Logout Endpoint'

17 Jun 2022 timeline

b'Enjin' disclosed a bug submitted by b'akashhamal0x01'
b'Race condition via project team member invitation system.'

17 Jun 2022 timeline

b'Yelp' disclosed a bug submitted by b'happykira0x1'
b'xmlrpc file enabled'

16 Jun 2022 timeline

b'curl' disclosed a bug submitted by b'iylz'
b'curl "globbing" can lead to denial of service attacks'

16 Jun 2022 timeline

b'Reddit' disclosed a bug submitted by b'marvelmaniac'
b'CSRF (protection bypassed) to force a below 18 user into viewing an nsfw subreddit !'

16 Jun 2022 timeline

b'TikTok' disclosed a bug submitted by b'aidilarf_2000'
b'Stored XSS on TikTok Live Form'

16 Jun 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'sachinrajput'
b'Rate limit Bypass on contact-us through IP Rotator (burp extension)(https://www.linkedin.com/help/linkedin/solve/contact)'

15 Jun 2022 timeline

b'Twitter' disclosed a bug submitted by b'saiful6601'
b'Delete direct message history without access the proper conversation_id'

15 Jun 2022 timeline

b'Twitter' disclosed a bug submitted by b'max2x'
b"Remote 0click exfiltration of Safari user's IP address"

15 Jun 2022 timeline

b'LinkedIn' disclosed a bug submitted by b'suryasnn'
b'The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more su'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs'
b'Golang : Add Query To Detect PAM Authorization Bugs'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs'
b'Golang : Hardcoded secret used for signing JWT'

15 Jun 2022 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory'

15 Jun 2022 timeline

b'UPchieve' disclosed a bug submitted by b'011alsanosi'
b'Hyper Link Injection while signup '

15 Jun 2022 timeline

b'Acronis' disclosed a bug submitted by b'mega7'
b'HTML Injection in E-mail'

14 Jun 2022 timeline

b'Acronis' disclosed a bug submitted by b'ub3rsick'
b'Reflected Cross Site Scripting at ColdFusion Debugging Panel http://www.grouplogic.com/CFIDE/debug/cf_debugFr.cfm'

14 Jun 2022 timeline

1 ... 162 163 164 165 166 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.