The unofficial HackerOne disclosure Timeline

b'Glovo' disclosed a bug submitted by b'celesian'
b'Reflected XSS on delivery.glovoapp.com'

18 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'vovohelo'
b'Possible LDAP username and password disclosed on Github'

17 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'amsda'
b'[acronis.secure.force.com] - Insecure Salesforce default/custom object permissions leads to information disclosure'

17 Aug 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'savproga'
b'Blind XSS Stored and CORS misconfiguration "" top.mail.ru'

17 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'aliyugombe'
b'No rate limit in otp code sending'

16 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'aliyugombe'
b'No rate limit lead to otp brute forcing'

16 Aug 2021 timeline

b'Elastic' disclosed a bug submitted by b's1r1u5'
b'Prototype Pollution leads to XSS on https://blog.swiftype.com/#__proto__[asd]=alert(document.domain)'

16 Aug 2021 timeline

b'Brave Software' disclosed a bug submitted by b'sickcodes'
b'Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log'

16 Aug 2021 timeline

b'Kartpay' disclosed a bug submitted by b'bugera'
b'Full Path Disclosure of Server through 500 Server Error'

16 Aug 2021 timeline

b'UPchieve' disclosed a bug submitted by b'scianto05'
b'CLICKJACKING LEADS TO DEACTIVATE ACCOUNT'

16 Aug 2021 timeline

b'Shopify' disclosed a bug submitted by b'riramar'
b'Improper Input Validation on https://oberlo-image-proxy.shopifycloud.com/'

16 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'bourbon'
b'SQL Injection in agent-manager'

16 Aug 2021 timeline

b'Rockstar Games' disclosed a bug submitted by b'ivanglinkin'
b'Brute Force against VMware Horizon'

16 Aug 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'abosala7'
b'Subdomain takeover on "info-edcrunch.skillfactory.ru" '

15 Aug 2021 timeline

b'The Internet' disclosed a bug submitted by b'yannayl'
b'IP-in-IP protocol routes arbitrary traffic by default - CVE-2020-10136'

15 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'lu3ky-13'
b'Reflected XSS on play.mtn.co.za'

14 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'lu3ky-13'
b'Blind SQL Injection '

14 Aug 2021 timeline

b'TikTok' disclosed a bug submitted by b'nanwn'
b'Information Disclosure on TikTok Unplugged Site'

13 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'mrmax4o4'
b'Domain Takeover [3737signals.com]'

13 Aug 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind'
b'mailer.i.bizml.ru viber service preprod information disclosure'

13 Aug 2021 timeline

1 ... 212 213 214 215 216 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.