The unofficial HackerOne disclosure Timeline

b'QIWI' disclosed a bug submitted by b'anonymouus'
b'account takeover through password reset in url https://reklama.tochka.com/'

02 Dec 2021 timeline

b'Basecamp' disclosed a bug submitted by b'fuzzsqlb0f'
b'Privilege Escalation leads to trash other users comment without having admin rights.'

01 Dec 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'c1kada'
b'Stored XSS on https://community.my.games/ (Add Post)'

01 Dec 2021 timeline

b'Azbuka Vkusa' disclosed a bug submitted by b'haxta4ok00'
b'Reflected XSS in photogallery component on [https://market.av.ru]'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' .....'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b' / .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b'XSS .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b' (50x50) .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b'XSS .'

01 Dec 2021 timeline

b'Glassdoor' disclosed a bug submitted by b'bombon'
b'[https://www.glassdoor.com] - Web Cache Deception Leads to gdtoken Disclosure '

30 Nov 2021 timeline

b'Acronis' disclosed a bug submitted by b'spookhorror'
b'IDOR vulnerability (Price manipulation)'

30 Nov 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'palaziv'
b'Unauthenticated Access to Admin Panel Functions at https:///'

29 Nov 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'palaziv'
b'Unauthenticated Access to Admin Panel Functions at https:///'

29 Nov 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dmonsterrr'
b'Expired SSL Certificate allows credentials steal'

29 Nov 2021 timeline

b'MCUboot' disclosed a bug submitted by b'r0m50'
b'private keys exposed on the GitHub repository'

27 Nov 2021 timeline

b'XVIDEOS' disclosed a bug submitted by b'sbakhour'
b'CSRF on delete friend requests - Not protected with CSRF Token'

26 Nov 2021 timeline

b'Shopify' disclosed a bug submitted by b'fr4via'
b'Insufficient session expiration in the **com.shopify.ping** android app'

26 Nov 2021 timeline

b'Shopify' disclosed a bug submitted by b'stapia'
b'A non-privileged user may create an admin account in Stocky'

25 Nov 2021 timeline

b'Shopify' disclosed a bug submitted by b'youstin'
b'Sidekiq dashboard exposed at notary.shopifycloud.com'

25 Nov 2021 timeline

1 ... 188 189 190 191 192 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.