The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'ian'
b'Exposed Golang debugger on tier3.riot.mail.ru:9090, 9080'

19 Jan 2022 timeline

b'Urban Dictionary' disclosed a bug submitted by b'bemodtwz'
b'DOM XSS through ads'

18 Jan 2022 timeline

b'Automattic' disclosed a bug submitted by b'rockybandana'
b'SSRF & Blind XSS in Gravatar email '

17 Jan 2022 timeline

b'Palo Alto Software' disclosed a bug submitted by b'paramdham'
b' Clickjacking'

17 Jan 2022 timeline

b'Slack' disclosed a bug submitted by b'jub0bs'
b'Lack of URL normalization renders Blocked-Previews feature ineffectual'

16 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'In orginization stored xss using location (Larksuite survey app)'

14 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b"Stored xss on helpdesk using user's city"

14 Jan 2022 timeline

b'IBM' disclosed a bug submitted by b'xyantix'
b'SQL Injection and plaintext passwords via User Search'

14 Jan 2022 timeline

b'Django' disclosed a bug submitted by b'scaramouche31'
b'Deserialization of potentially malicious data to RCE'

14 Jan 2022 timeline

b'Ruby' disclosed a bug submitted by b'sohaib619'
b'Bug Report : [ No Valid SPF Records ]'

13 Jan 2022 timeline

b'Adobe' disclosed a bug submitted by b'ismailmuh'
b'AEM forms XXE Vulnerability'

13 Jan 2022 timeline

b'Adobe' disclosed a bug submitted by b'letm3through'
b'Disclosure of github access token in config file via nignx off-by-slash'

13 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Reflected xss and open redirect on larksuite.com using /?back_uri= parameter.'

13 Jan 2022 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b"[IDOR] Modify other team's reminders via reminderId parameter"

13 Jan 2022 timeline

b'Zenly' disclosed a bug submitted by b'yetanotherhacker'
b'Friend Request Flow Exposes User Data '

12 Jan 2022 timeline

b'Zenly' disclosed a bug submitted by b'yetanotherhacker'
b'Account Takeover via SMS Authentication Flow '

12 Jan 2022 timeline

b'Nord Security' disclosed a bug submitted by b'paramdham'
b'CSRF to change password'

12 Jan 2022 timeline

b'Gener8' disclosed a bug submitted by b'paramdham'
b'Clickjacking to change email address'

12 Jan 2022 timeline

b'Node.js' disclosed a bug submitted by b'rugvip'
b'Prototype pollution via console.table properties'

11 Jan 2022 timeline

b'Mail.ru' disclosed a bug submitted by b'kassem_s94'
b'blog/wp-json/wp/v2/users FILE is enable it will used for bruteforce attack the admin panel at blog/wp-login.php'

09 Jan 2022 timeline

1 ... 187 188 189 190 191 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.