The unofficial HackerOne disclosure Timeline

b'U.S. General Services Administration' disclosed a bug submitted by b'0x0luke'
b'Path Traversal on meetcqpub1.gsa.gov allows attackers to see arbitrary file listings.'

02 Oct 2021 timeline

b'TikTok' disclosed a bug submitted by b'siratsami'
b'Broken Link on TikTokUS.Info'

01 Oct 2021 timeline

b'OneWeb' disclosed a bug submitted by b'lesleybw'
b'Vulnerable Jira Instance'

30 Sep 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pr3r00t'
b' - XSS - CVE-2020-3580'

29 Sep 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x3f'
b"Information disclosure at '' --- CVE-2020-14179"

29 Sep 2021 timeline

b'QIWI' disclosed a bug submitted by b'wdahlenb'
b'HTTP Request Smuggling on api.flocktory.com Leads to XSS on Customer Sites'

29 Sep 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'uddeshaya001'
b'[ii.worki.ru ] emarsys subdomain takeover'

28 Sep 2021 timeline

b'MTN Group' disclosed a bug submitted by b'devhug'
b'[mtn.com.af] Multiple vulnerabilities allow to Application level DoS'

28 Sep 2021 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'ouyang'
b'CVE-2021-3711: SM2 decrypt buffer overflow '

27 Sep 2021 timeline

b'Localize' disclosed a bug submitted by b'thd3r7'
b'Stored XSS in Document Title'

27 Sep 2021 timeline

b'Tor' disclosed a bug submitted by b'sickcodes'
b'Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.'

27 Sep 2021 timeline

b'DuckDuckGo' disclosed a bug submitted by b'webklex'
b'com.duckduckgo.mobile.android - Cache corruption'

26 Sep 2021 timeline

b'MTN Group' disclosed a bug submitted by b'alimanshester'
b'Reflected Cross-Site scripting in : mtn.bj'

26 Sep 2021 timeline

b'QIWI' disclosed a bug submitted by b'lalit2020'
b'CVE-2020-3187 - unauthenticated arbitrary file deletion in Cisco'

24 Sep 2021 timeline

b'Brave Software' disclosed a bug submitted by b'bhatiagaurav1211'
b'unclaimed s3 bucket takeover in the 3 js file located on the github page of brave software'

24 Sep 2021 timeline

b'Redtube' disclosed a bug submitted by b'kevsecurity'
b'Deserialization of untrusted data at https://www.redtube.com/media/hls?s=data'

24 Sep 2021 timeline

b'Concrete CMS' disclosed a bug submitted by b'egix'
b'Phar Deserialization Vulnerability via Logging Settings'

24 Sep 2021 timeline

b'curl' disclosed a bug submitted by b'monnerat'
b'CVE-2021-22946: Protocol downgrade required TLS bypassed'

24 Sep 2021 timeline

b'curl' disclosed a bug submitted by b'monnerat'
b'CVE-2021-22947: STARTTLS protocol injection via MITM'

24 Sep 2021 timeline

b'GitLab' disclosed a bug submitted by b'maruthi12'
b'Guest Users can create issues for Sentry errors and track their status'

24 Sep 2021 timeline

1 ... 203 204 205 206 207 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.