The unofficial HackerOne disclosure Timeline

b'Reddit' disclosed a bug submitted by b'faberge'
b'Domain Takeover of Reddit.ru via DNS Hijacking'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'bhatiagaurav1211'
b'No Rate Limit on redditgifts gift when Adding Comment'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'manish_prajapat'
b"Email Verification Bypass And Get access to user's private invitation."

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'c_j_27'
b'No Password Length Restriction leads to Denial of Service'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'parasimpaticki'
b'Deleting all DMs on RedditGifts.com'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'yanouhd'
b'IDOR to pay less for coin purchases on oauth.reddit.com via /api/v2/gold/paypal/create_coin_purchase_order in `order_id` parameter '

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'sandeep_rj49'
b'[dubmash] Lack of authorization checks - Update Sound Titles'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'abdallah1911'
b'Content Spoofing'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'bhatiagaurav1211'
b's3 bucket takeover presented in https://github.com/reddit/rpan-studio/blob/e1782332c75ecb2f774343258ff509788feab7ce/CI/full-build-macos.sh'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'falcon_319'
b'hardcoded api secret & api key in com.reddit.frontpage'

21 Oct 2021 timeline

b'Shopify' disclosed a bug submitted by b'golim'
b'Shopify.com Web Cache Deception vulnerability leads to personal information and CSRF tokens leakage'

21 Oct 2021 timeline

b'Shopify' disclosed a bug submitted by b'fr4via'
b'Store Deletion or Sell without authentication'

21 Oct 2021 timeline

b'Shopify' disclosed a bug submitted by b'm7mdharoun'
b'Domain Takeover at 3hopify.media'

21 Oct 2021 timeline

b'Reddit' disclosed a bug submitted by b'nicolaas'
b'Hash-Collision Denial-of-Service Vulnerability in Markdown Parser'

21 Oct 2021 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'4nim4l'
b'"urllib" will result to deny of service'

21 Oct 2021 timeline

b'Concrete CMS' disclosed a bug submitted by b'reset'
b'Arbitrary File delete via PHAR deserialization'

20 Oct 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'0x0luke'
b'RCE on 17 different Docker containers on your network'

20 Oct 2021 timeline

b'Node.js' disclosed a bug submitted by b'mkg'
b'HTTP Request Smuggling due to accepting space before colon'

20 Oct 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'k3ypt0'
b' Zeppelin '

20 Oct 2021 timeline

b'Evernote' disclosed a bug submitted by b'sampritdas'
b'CSRF leads to account deactivation of users'

19 Oct 2021 timeline

1 ... 195 196 197 198 199 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.