The unofficial HackerOne disclosure Timeline

b'Omise' disclosed a bug submitted by b'sim4n6'
b"The endpoint '/test/webhooks' is vulnerable to DNS Rebinding"

22 Mar 2022 timeline

b'Omise' disclosed a bug submitted by b'sim4n6'
b'Race condition on action: Invite members to a team'

22 Mar 2022 timeline

b'Khan Academy' disclosed a bug submitted by b'sim4n6'
b'The endpoint /api/internal/graphql/requestAuthEmail on Khanacademy.or is vulnerable to Race Condition Attack.'

22 Mar 2022 timeline

b'Lyst' disclosed a bug submitted by b'deksterh1'
b'Web Cache poisoning attack leads to User information Disclosure and more'

22 Mar 2022 timeline

b'Lyst' disclosed a bug submitted by b'mandark'
b'[https:///]&&[https:///] Open Redirection'

22 Mar 2022 timeline

b'Mattermost' disclosed a bug submitted by b'rynexxx'
b'html injection via invite members can be leads account takeover '

22 Mar 2022 timeline

b'Adobe' disclosed a bug submitted by b'sheikhrishad0'
b'Log4j Java RCE in [beta.dev.adobeconnect.com]'

21 Mar 2022 timeline

b'GitLab' disclosed a bug submitted by b'vakzz'
b'Arbitrary file read via the bulk imports UploadsPipeline'

21 Mar 2022 timeline

b'Glassdoor' disclosed a bug submitted by b'safehacker_2715'
b'Get all personal email IDs of Glassdoor users[No user interaction required]'

21 Mar 2022 timeline

b'SecurityScorecard' disclosed a bug submitted by b'ww1'
b'RXSS '

20 Mar 2022 timeline

b'MTN Group' disclosed a bug submitted by b'xlife'
b'Insecure crossdomain.xml on https://vdc.mtnonline.com/'

20 Mar 2022 timeline

b'MTN Group' disclosed a bug submitted by b'xlife'
b'Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history'

20 Mar 2022 timeline

b'Yoti' disclosed a bug submitted by b'ww1'
b'PIN BYPASS '

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'unknownsh'
b'Military name,email,phone,address,certdata Disclosure '

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirneci'
b'CVE-2020-3452 on https:///'

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirneci'
b'Arbitrary File Deletion (CVE-2020-3187) on '

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'CSRF - Modify User Settings with one click - Account TakeOver'

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'Reflected XSS - in Email Input'

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'IDOR - Delete Users Saved Projects'

18 Mar 2022 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi'
b'CSRF - Delete Account (Urgent)'

18 Mar 2022 timeline

1 ... 176 177 178 179 180 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.