The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'nakabonne'
b'[geekbrains.ru] Node modules path disclosure due to lack of error handling'

27 Jul 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'act1on3'
b'[app-01.youdrive.club] RCE in CI/CD via dependency confusion'

27 Jul 2021 timeline

b'Shopify' disclosed a bug submitted by b'augustozanellato'
b'Github access token exposure'

26 Jul 2021 timeline

b'Phabricator' disclosed a bug submitted by b'crownpeanut'
b'Git flag injection leads to arbitrary file write'

25 Jul 2021 timeline

b'The Internet' disclosed a bug submitted by b'metnew'
b'Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url) '

23 Jul 2021 timeline

b'The Internet' disclosed a bug submitted by b'simonscannell'
b'[CVE-2020-27194] Linux kernel: eBPF verifier bug in `or` binary operation tracking function leads to LPE'

23 Jul 2021 timeline

b'Data Processing (IBB)' disclosed a bug submitted by b'dotsecurity'
b'tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c'

23 Jul 2021 timeline

b'The Internet' disclosed a bug submitted by b'vanhoefm'
b'Fragmentation and Aggregation Flaws in Wi-Fi'

23 Jul 2021 timeline

b'The Internet' disclosed a bug submitted by b'itszn'
b'Canonical Snapcraft vulnerable to remote code execution under certain conditions'

23 Jul 2021 timeline

23 Jul 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'shell_c0de'
b'[Lark Android] Vulnerability in exported activity WebView'

22 Jul 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'alexeysergeevich'
b'[tanks.mail.ru] SSRF + cookie '

22 Jul 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'sec_zone64'
b'Bypassing SOP with XSS on account.my.games leading to steal CSRF token and user information'

22 Jul 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'01alsanosi'
b'Unauthorized Access To Admin panel'

22 Jul 2021 timeline

b'Khan Academy' disclosed a bug submitted by b'renganathan'
b'Enumerate all the class codes via google dorking '

22 Jul 2021 timeline

b'Uber' disclosed a bug submitted by b'penguinsaretasty'
b'pam_ussh does not properly validate the SSH certificate authority'

21 Jul 2021 timeline

b'curl' disclosed a bug submitted by b'thoger'
b'CVE-2021-22925: TELNET stack contents disclosure again'

21 Jul 2021 timeline

b'Bumble' disclosed a bug submitted by b'robertheaton'
b"Exfiltrating a victim's exact location (to within 5m)"

21 Jul 2021 timeline

b'Phabricator' disclosed a bug submitted by b'thund3r17'
b'Broken Authentication and Session Management lead to take over account'

21 Jul 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22924: Bad connection reuse due to flawed path name checks'

21 Jul 2021 timeline

1 ... 212 213 214 215 216 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.