The unofficial HackerOne disclosure Timeline

b'UPchieve' disclosed a bug submitted by b'elcayser-0x0a'
b'No Rate Limit On Reset Password'

31 Aug 2021 timeline

b'Nutanix' disclosed a bug submitted by b'blue_deja_vu'
b'Open Redirect at https://www.nutanix.com/tw/login via icid parameter'

31 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'f_m'
b'IDOR on www.acronis.com API lead to steal private business user information'

31 Aug 2021 timeline

b'UPchieve' disclosed a bug submitted by b'elcayser-0x0a'
b'old session dose not expire after password change '

31 Aug 2021 timeline

b'UPchieve' disclosed a bug submitted by b'aaruthra'
b'Failed to validate Session after Password Change'

31 Aug 2021 timeline

b'Affirm' disclosed a bug submitted by b'litt1eb0y'
b'Open Redirect'

31 Aug 2021 timeline

b'Homebrew' disclosed a bug submitted by b'gedwards'
b'Bypass of the installation sandbox by injecting keystrokes with TIOCSTI'

30 Aug 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'pulpkk'
b'Index Out Of Bounds in protobuf unmarshalling'

30 Aug 2021 timeline

b'Sifchain' disclosed a bug submitted by b'escanor56'
b'SSH server due to Improper Signature Verification'

30 Aug 2021 timeline

b'GitLab' disclosed a bug submitted by b'joaxcar'
b'A deactivated user can access data through GraphQL'

30 Aug 2021 timeline

b'GitLab' disclosed a bug submitted by b'maruthi12'
b'A profile page of a user can be denied from loading by appending .html to the username'

30 Aug 2021 timeline

b'GitLab' disclosed a bug submitted by b'maruthi12'
b'Guest users can create new test cases'

30 Aug 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'rainbow_json'
b'[Biz] [Mailer] * '

30 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'logic_err0r'
b'Unauthenticated Arbitrary File Deletion (CVE-2020-3187)'

29 Aug 2021 timeline

b'Uber' disclosed a bug submitted by b'ayoubfathi_'
b'Publicly exposed HashiCorp Vault (Secrets management) at usec-gcp-staging.uberinternal.com & usec-gcp.uberinternal.com'

27 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'neex'
b'HTTP Request Smuggling via HTTP/2'

27 Aug 2021 timeline

b'Courier' disclosed a bug submitted by b'bugera'
b'2 Bypass of #1067533 rate limit via X-Forwarded-For<space>: Source IP on ( www.trycourier.app )'

27 Aug 2021 timeline

b'UPchieve' disclosed a bug submitted by b'lu3ky-13'
b'No Rate Limit On Contact Us '

27 Aug 2021 timeline

b'Tor' disclosed a bug submitted by b'sasikaran'
b'Information Exposure Through Directory Listing'

27 Aug 2021 timeline

b'Nginx (IBB)' disclosed a bug submitted by b'luismerino'
b'1-byte heap buffer overflow in DNS resolver'

27 Aug 2021 timeline

1 ... 210 211 212 213 214 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.