The unofficial HackerOne disclosure Timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b"Stored xss on helpdesk using user's city"

14 Jan 2022 timeline

b'IBM' disclosed a bug submitted by b'xyantix'
b'SQL Injection and plaintext passwords via User Search'

14 Jan 2022 timeline

b'Django' disclosed a bug submitted by b'scaramouche31'
b'Deserialization of potentially malicious data to RCE'

14 Jan 2022 timeline

b'Ruby' disclosed a bug submitted by b'sohaib619'
b'Bug Report : [ No Valid SPF Records ]'

13 Jan 2022 timeline

b'Adobe' disclosed a bug submitted by b'ismailmuh'
b'AEM forms XXE Vulnerability'

13 Jan 2022 timeline

b'Adobe' disclosed a bug submitted by b'letm3through'
b'Disclosure of github access token in config file via nignx off-by-slash'

13 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Reflected xss and open redirect on larksuite.com using /?back_uri= parameter.'

13 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b"[IDOR] Modify other team's reminders via reminderId parameter"

13 Jan 2022 timeline

b'Zenly' disclosed a bug submitted by b'yetanotherhacker'
b'Friend Request Flow Exposes User Data '

12 Jan 2022 timeline

b'Zenly' disclosed a bug submitted by b'yetanotherhacker'
b'Account Takeover via SMS Authentication Flow '

12 Jan 2022 timeline

b'Nord Security' disclosed a bug submitted by b'paramdham'
b'CSRF to change password'

12 Jan 2022 timeline

b'Gener8' disclosed a bug submitted by b'paramdham'
b'Clickjacking to change email address'

12 Jan 2022 timeline

b'Node.js' disclosed a bug submitted by b'rugvip'
b'Prototype pollution via console.table properties'

11 Jan 2022 timeline

b'Mail.ru' disclosed a bug submitted by b'kassem_s94'
b'blog/wp-json/wp/v2/users FILE is enable it will used for bruteforce attack the admin panel at blog/wp-login.php'

09 Jan 2022 timeline

b'MariaDB' disclosed a bug submitted by b'realtess'
b'Grafana LFI on https://grafana.mariadb.org'

06 Jan 2022 timeline

b'Twitter' disclosed a bug submitted by b'ian'
b'Subdomain takeover of images.crossinstall.com'

05 Jan 2022 timeline

b'Mattermost' disclosed a bug submitted by b'at11zt00'
b'ABLE TO TRICK THE VICTIM INTO USING A CRAFTED EMAIL ADDRESS FOR A PARTICULAR SESSION AND THEN LATER TAKE BACK THE ACCOUNT '

05 Jan 2022 timeline

b'8x8' disclosed a bug submitted by b'n1had'
b'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)'

05 Jan 2022 timeline

b'Nutanix' disclosed a bug submitted by b'kauenavarro'
b'OPEN REDIRECT '

04 Jan 2022 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal'
b'Buffer overflow in req_parsebody method in lua_request.c'

04 Jan 2022 timeline

1 ... 181 182 183 184 185 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.