The unofficial HackerOne disclosure Timeline

b'h1-ctf' disclosed a bug submitted by b'w31rd0'
b'The Return of the Grinch'

01 Feb 2022 timeline

b'h1-ctf' disclosed a bug submitted by b'akshansh'
b'Saving Christmas from Grinchy Gods'

01 Feb 2022 timeline

b'Dropbox' disclosed a bug submitted by b'bugdiscloseguys'
b'Full Response SSRF via Google Drive'

01 Feb 2022 timeline

b'VK.com' disclosed a bug submitted by b'b4walid'
b'Reflected Xss On https://vk.com/search'

01 Feb 2022 timeline

b'Urban Company' disclosed a bug submitted by b'ian'
b'Critical full compromise of jarvis-new.urbanclap.com via weak session signing'

30 Jan 2022 timeline

b'UPchieve' disclosed a bug submitted by b'tomyway'
b'No character limit in password field'

30 Jan 2022 timeline

b'Monero' disclosed a bug submitted by b'nim4'
b'Misconfiguration in build environment allows DLL preloading attack'

29 Jan 2022 timeline

b'Omise' disclosed a bug submitted by b'oblivionlight'
b'XSS via X-Forwarded-Host header'

29 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'sirleeroyjenkins'
b'Full read SSRF via Lark Docs `import as docs` feature '

28 Jan 2022 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'Improper access control for users with expired password, giving the user full access through API and Git'

27 Jan 2022 timeline

b'Zomato' disclosed a bug submitted by b'mosec9'
b'subdomain takeover on fddkim.zomato.com'

27 Jan 2022 timeline

b'FetLife' disclosed a bug submitted by b'castilho'
b'Specific Payload makes a Users Posts unavailable'

26 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Able to steal private files by manipulating response using Auto Reply function of Lark'

25 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Able to steal private files by manipulating response using Compose Email function of Lark'

25 Jan 2022 timeline

b'Mail.ru' disclosed a bug submitted by b'official_dhivish'
b'Subdomain Takeover'

25 Jan 2022 timeline

b'TikTok' disclosed a bug submitted by b'blubluuu'
b'Cross site scripting via file upload in subdomain ads.tiktok.com'

25 Jan 2022 timeline

b'Imgur' disclosed a bug submitted by b'blackfly_'
b'No length on password'

24 Jan 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal'
b'Buffer Overflow in optimized_escape_html method'

22 Jan 2022 timeline

b'Imgur' disclosed a bug submitted by b'whoami991'
b'xss reflected on imgur.com'

22 Jan 2022 timeline

b'Weblate' disclosed a bug submitted by b'joshmcman08'
b'hosted.weblate.org display of unfiltered results'

21 Jan 2022 timeline

1 ... 178 179 180 181 182 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.