The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'null_bytes'
b' vulnerable to CVE-2022-22954'

29 Apr 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mido0x0x'
b'Blind SQL Injection'

29 Apr 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mido0x0x'
b'SQL INJECTION in https:/// '

29 Apr 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'igorpyan'
b'Possibility to force an admin to install recommended applications'

29 Apr 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'monnerat'
b'OAUTH2 bearer not-checked for connection re-use'

29 Apr 2022 timeline

b'curl' disclosed a bug submitted by b'monnerat'
b'CVE-2022-22576: OAUTH2 bearer bypass in connection re-use'

29 Apr 2022 timeline

b'Mattermost' disclosed a bug submitted by b'thesecuritydev'
b'DoS via large console messages'

29 Apr 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27776: Auth/cookie leak on redirect'

29 Apr 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27775: Bad local IPv6 connection reuse'

29 Apr 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27774: Credential leak on redirect'

29 Apr 2022 timeline

b'8x8' disclosed a bug submitted by b'bx_1'
b' subdomain takeover (abandoned Zendesk .easycontactnow.com)'

28 Apr 2022 timeline

b'GitLab' disclosed a bug submitted by b'ec0'
b'Container escape on public GitLab CI runners'

27 Apr 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27776: Auth/cookie leak on redirect '

27 Apr 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27775: Bad local IPv6 connection reuse'

27 Apr 2022 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2022-27774: Credential leak on redirect'

27 Apr 2022 timeline

b'Tennessee Valley Authority' disclosed a bug submitted by b'yassinek3ch'
b'SQL Injection on https://soa-accp.glbx.tva.gov/ via "/api/" path - VI-21-015'

26 Apr 2022 timeline

b'Judge.me ' disclosed a bug submitted by b'glister'
b'Stored XSS in "product type" field executed via product filters'

26 Apr 2022 timeline

b'Basecamp' disclosed a bug submitted by b'ian'
b'RCE via exposed JMX server on jabber.37signals.com/jabber.basecamp.com'

26 Apr 2022 timeline

b'Nutanix' disclosed a bug submitted by b'tosun'
b'Local file disclosure through SSRF at next.nutanix.com'

25 Apr 2022 timeline

b'Krisp' disclosed a bug submitted by b'sammam'
b"Force User to Accept Attacker's invite [ Restrict user to create account]"

25 Apr 2022 timeline

1 ... 170 171 172 173 174 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.