The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'z2_'
b'CVE-2021-22945: UAF and double-free in MQTT sending'

15 Sep 2021 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'Stored XSS in main page of a project caused by arbitrary script payload in group "Default initial branch name"'

15 Sep 2021 timeline

b'Revive Adserver' disclosed a bug submitted by b'418sec'
b'Use of a Broken or Risky Cryptographic Algorithm'

15 Sep 2021 timeline

b'LINE' disclosed a bug submitted by b'reinforchu'
b'Webview address bar spoofing in LINE client for iOS'

15 Sep 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-079: Query to detect XSS with JavaServer Faces (JSF)'

15 Sep 2021 timeline

b'Flickr' disclosed a bug submitted by b'asad0x01_'
b'CSRF in Account Deletion feature (https://www.flickr.com/account/delete)'

14 Sep 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: Add XXE sinks'

14 Sep 2021 timeline

b'Valve' disclosed a bug submitted by b'slidybat'
b'Buffer overrun in Steam SILK voice decoder'

13 Sep 2021 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'thespiritman'
b'No Rate Limit On Regenerate Password on Portswigger'

13 Sep 2021 timeline

b'Mattermost' disclosed a bug submitted by b'fuzzsqlb0f'
b'Privilege Escalation leading to post in channel without having privilege'

13 Sep 2021 timeline

b'Monero' disclosed a bug submitted by b'thecharlatan'
b'Unix time unlock_time values have dangerous validation rules enabling a number of exploits'

12 Sep 2021 timeline

b'Monero' disclosed a bug submitted by b'thecharlatan'
b'Hardware Wallets Do Not Check Unlock TIme'

12 Sep 2021 timeline

b'Shopify' disclosed a bug submitted by b'jmp_35p'
b'Create free Shopify application credits.'

10 Sep 2021 timeline

b'Node.js' disclosed a bug submitted by b'pimterry'
b'Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validation'

10 Sep 2021 timeline

b'Node.js' disclosed a bug submitted by b'philippjeitner'
b'Improper handling of untypical characters in domain names'

10 Sep 2021 timeline

b'MTN Group' disclosed a bug submitted by b'devhug'
b'[play.mtn.co.za] Application level DoS via xmlrpc.php'

10 Sep 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'savproga'
b'Stored XSS on top.mail.ru'

10 Sep 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'brumens'
b'SQL injection located in `` in POST param `` '

09 Sep 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'miguel_santareno'
b'System Error Reveals SQL Information'

09 Sep 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lu3ky-13'
b'Sensitive data exposure via https:///jira//secure/QueryComponent!Default.jspa - CVE-2020-14179'

09 Sep 2021 timeline

1 ... 207 208 209 210 211 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.