The unofficial HackerOne disclosure Timeline

b'FetLife' disclosed a bug submitted by b'trieulieuf9'
b'Able to access private picture/video/writing when requesting for their JSON response'

16 Dec 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'codermak'
b'Broken Link Takeover from kubernetes.io docs'

16 Dec 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'codermak'
b'Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose"'

16 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'bombon'
b'Weak rate limit could lead to ATO due to weak password protection mechanisms'

15 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'cracker922'
b'No rate limit on password reset leads to email enumeration at gateway-production.dubsmash.com '

15 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' '

15 Dec 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'seifelsallamy'
b'reflected xss in e.mail.ru'

15 Dec 2021 timeline

b'Aiven Ltd' disclosed a bug submitted by b'j0v'
b'Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file read'

14 Dec 2021 timeline

b'Proctorio' disclosed a bug submitted by b'sector7-nl'
b'Universal Cross-Site Scripting vulnerability'

14 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'asce21'
b'[dubsmash] Username and password bruteforce'

13 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'nexus2k'
b'com.reddit.frontpage vulernable to Task Hijacking (aka StrandHogg Attack)'

13 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'sandeep_rj49'
b"[dubsmash] Long String in 'shoutout' Parameter Leading Internal server Error on Popular hastags , Community and User Profile"

13 Dec 2021 timeline

b'Reddit' disclosed a bug submitted by b'dreamispossible'
b'No Rate limit on change password leads to account takeover'

13 Dec 2021 timeline

b'Shipt' disclosed a bug submitted by b'shell_c0de'
b'Vulnerabilities in exported activity WebView'

13 Dec 2021 timeline

b'Judge.me ' disclosed a bug submitted by b'tefa_'
b'Error Page Content Spoofing or Text Injection'

13 Dec 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'mrirfan__07'
b' add class vulnerable Stored XSS'

12 Dec 2021 timeline

b'MTN Group' disclosed a bug submitted by b'0xelkomy'
b'RXSS - http://macademy.mtnonline.com'

11 Dec 2021 timeline

b'MTN Group' disclosed a bug submitted by b'aliyugombe'
b'Missing captcha and rate limit protection in help form '

11 Dec 2021 timeline

b'Intel Corporation' disclosed a bug submitted by b'matheus_garbelini'
b'[BrakTooth] Bluetooth vulnerability allows attacker to disconnect or deny reconnection to BT devices connected to a target. Attack #1'

11 Dec 2021 timeline

1 ... 189 190 191 192 193 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.