The unofficial HackerOne disclosure Timeline

b'ownCloud' disclosed a bug submitted by b'ihsinme'
b'File System Monitoring Queue Overflow'

03 Dec 2021 timeline

b'Shopify' disclosed a bug submitted by b'hydraxanon82'
b'Ability to add address without being an admin or staff in the store via wholesale store'

03 Dec 2021 timeline

b'Shopify' disclosed a bug submitted by b'j0j0'
b'Unathorised access to admin endpoint on plus-website-staging5.shopifycloud.com'

03 Dec 2021 timeline

b'Slack' disclosed a bug submitted by b'oskarsv'
b'Stored XSS in files.slack.com'

02 Dec 2021 timeline

b'Shopify' disclosed a bug submitted by b'cthulhufhtagn'
b'Bypassing HTML filter in "Packing Slip Template" Lead to SSRF to Internal Kubernetes Endpoints'

02 Dec 2021 timeline

b'Glassdoor' disclosed a bug submitted by b'zonduu'
b'CSS injection via link tag whitelisted-domain bypass - https://www.glassdoor.com'

02 Dec 2021 timeline

b'QIWI' disclosed a bug submitted by b'anonymouus'
b'account takeover through password reset in url https://reklama.tochka.com/'

02 Dec 2021 timeline

b'Basecamp' disclosed a bug submitted by b'fuzzsqlb0f'
b'Privilege Escalation leads to trash other users comment without having admin rights.'

01 Dec 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'c1kada'
b'Stored XSS on https://community.my.games/ (Add Post)'

01 Dec 2021 timeline

b'Azbuka Vkusa' disclosed a bug submitted by b'haxta4ok00'
b'Reflected XSS in photogallery component on [https://market.av.ru]'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' .....'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b' / .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b'XSS .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b' (50x50) .'

01 Dec 2021 timeline

b'VK.com' disclosed a bug submitted by b'azimoff'
b'XSS .'

01 Dec 2021 timeline

b'Glassdoor' disclosed a bug submitted by b'bombon'
b'[https://www.glassdoor.com] - Web Cache Deception Leads to gdtoken Disclosure '

30 Nov 2021 timeline

b'Acronis' disclosed a bug submitted by b'spookhorror'
b'IDOR vulnerability (Price manipulation)'

30 Nov 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'palaziv'
b'Unauthenticated Access to Admin Panel Functions at https:///'

29 Nov 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'palaziv'
b'Unauthenticated Access to Admin Panel Functions at https:///'

29 Nov 2021 timeline

1 ... 194 195 196 197 198 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.