The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27780: percent-encoded path separator in URL host'

11 May 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'nickvergessen'
b'SQL injextion via vulnerable doctrine/dbal version'

11 May 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27782: TLS and SSH connection too eager reuse'

11 May 2022 timeline

b'Priceline' disclosed a bug submitted by b'badca7'
b'Account takeover via Google OneTap'

11 May 2022 timeline

b'curl' disclosed a bug submitted by b'haxatron1'
b'CVE-2022-27779: cookie for trailing dot TLD'

11 May 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27778: curl removes wrong file on error'

11 May 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'Certificate authentication re-use on redirect'

11 May 2022 timeline

b'Alohi' disclosed a bug submitted by b'shamim_12__'
b'Misconfigured Rate Limit in Sending Notifications to the Victims Phone Via the Endpoint " /faxes/inbox "'

10 May 2022 timeline

b'Phabricator' disclosed a bug submitted by b'dyls'
b'Global default settings page is accessible to non-administrators'

09 May 2022 timeline

b'Phabricator' disclosed a bug submitted by b'dyls'
b'Slowvote and Countdown can cause Denial of Service due to recursive inclusion'

09 May 2022 timeline

b'Reddit' disclosed a bug submitted by b'abhiramsita'
b'Reflected xss in https://sh.reddit.com'

08 May 2022 timeline

b'TikTok' disclosed a bug submitted by b's3c'
b'Multiple IDORs in family pairing api'

06 May 2022 timeline

b'IBM' disclosed a bug submitted by b'asterite'
b'SQL injection in URL path processing on www.ibm.com'

06 May 2022 timeline

b'Reddit' disclosed a bug submitted by b'bisesh'
b'Able to bypass email verification and change email to any other user email '

06 May 2022 timeline

b'Palantir Public' disclosed a bug submitted by b'codermak'
b'Github Account Takeover which is used as gradle vcs in "github.com/palantir/gradle-launch-config-plugin"'

05 May 2022 timeline

b'TikTok' disclosed a bug submitted by b'rioncool22'
b'Clickjacking Vulnerability Can Leads To Delete Developer APP'

04 May 2022 timeline

b'TikTok' disclosed a bug submitted by b'fr4via'
b'One Click Account Hijacking via Unvalidated Deeplink'

04 May 2022 timeline

b'TikTok' disclosed a bug submitted by b'glassplant'
b'URL Scheme misconfiguration on TikTok for IOS'

04 May 2022 timeline

b'Judge.me ' disclosed a bug submitted by b'b3hlull'
b'Blind XSS via Feedback form.'

03 May 2022 timeline

b'Acronis' disclosed a bug submitted by b'sudo_bash'
b'Self-DoS due to template injection via email field in password reset form on access.acronis.com'

03 May 2022 timeline

1 ... 167 168 169 170 171 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.