The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'smallyu'
b'stand.pw.mail.ru xss'

03 Mar 2022 timeline

b'TikTok' disclosed a bug submitted by b'datph4m'
b'IDOR delete any Tickets on ads.tiktok.com'

02 Mar 2022 timeline

b'TikTok' disclosed a bug submitted by b'lu3ky-13'
b'Open Redirect TO Stealing aadvid'

02 Mar 2022 timeline

b'Pornhub' disclosed a bug submitted by b'wh0ru'
b'Reflected XSS on www.pornhub.com and www.pornhubpremium.com'

02 Mar 2022 timeline

b'Acronis' disclosed a bug submitted by b'hatnare'
b'Session Fixation on Acronis'

01 Mar 2022 timeline

b'Mattermost' disclosed a bug submitted by b'odx09'
b'Bypass Email Verification in Customer Portal'

26 Feb 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'prateek_thakare'
b'[AWC-Pune] - User can download files deleted by Admin using shortcuts'

25 Feb 2022 timeline

b'Slack' disclosed a bug submitted by b'danielllewellyn'
b'[Android] Directory traversal leading to disclosure of auth tokens'

25 Feb 2022 timeline

b'HackerOne' disclosed a bug submitted by b'iamr0000t'
b'Hackerone open redirect security alert bypass via view report as PDF '

25 Feb 2022 timeline

b'Mail.ru' disclosed a bug submitted by b'388'
b'Deliviry Club Courier app (v. 3.9.25.0); Disclosure phone number of client.'

23 Feb 2022 timeline

b'Zomato' disclosed a bug submitted by b'ashoka_rao'
b'Add upto 10K rupees to a wallet by paying an arbitrary amount'

23 Feb 2022 timeline

b'TikTok' disclosed a bug submitted by b'johnstone'
b'Incorrect authorization to the intelbot service leading to ticket information'

23 Feb 2022 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'IDOR in "external status check" API leaks data about any status check on the instance'

22 Feb 2022 timeline

b'QIWI' disclosed a bug submitted by b'uddeshaya'
b'broken authentication (password reset link not expire after use in https://network.tochka.com/sign-up)'

22 Feb 2022 timeline

b'Acronis' disclosed a bug submitted by b'lu3ky-13'
b'FULL SSRF '

22 Feb 2022 timeline

b'Zomato' disclosed a bug submitted by b'ashoka_rao'
b'Claiming the listing of a non-delivery restaurant through OTP manipulation'

22 Feb 2022 timeline

b'8x8' disclosed a bug submitted by b'adnanmalikinfo'
b' api key exposed in github.com//'

22 Feb 2022 timeline

b'Automattic' disclosed a bug submitted by b'ajoekerr'
b'De-anonymize anonymous tips through the Tumblr blog network'

21 Feb 2022 timeline

b'curl' disclosed a bug submitted by b'nsq11'
b' Remote memory disclosure vulnerability in libcurl on 64 Bit Windows'

21 Feb 2022 timeline

b'Zomato' disclosed a bug submitted by b'codersanjay'
b'Page has a link to google drive which has logos and a few customer phone recordings'

21 Feb 2022 timeline

1 ... 174 175 176 177 178 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.