The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport'

21 Jul 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22923: Metalink download sends credentials'

21 Jul 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22922: Wrong content via metalink not discarded'

21 Jul 2021 timeline

b'Ian Dunn' disclosed a bug submitted by b'praalsanthpro'
b'Multiple server ssh usernames leaked in your github repository'

19 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'tester12rtg'
b'Stored-XSS in merge requests'

19 Jul 2021 timeline

b'Acronis' disclosed a bug submitted by b'samincube'
b'Reflected XSS via "Error" parameter on https://admin.acronis.com/admin/su/'

19 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'ooooooo_q'
b'Stored XSS in custom emoji'

19 Jul 2021 timeline

b'Ruby' disclosed a bug submitted by b'chinarulezzz'
b"OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc'"

19 Jul 2021 timeline

b'Basecamp' disclosed a bug submitted by b'alone_breecher'
b'Information Disclosure .htaccess accesible for public'

18 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'wester0x01'
b'Leak arbitrary file under nextcloud android client privacy directory'

17 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap'
b'[go]: Add query for detecting CORS misconfiguration'

16 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Ransomware protection is missing extentions take 2'

16 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'[Java] CWE-918: Added URLClassLoader and WebClient SSRF sinks'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun'
b'[Java] JShell Injection'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'timolesml'
b'[Java]: CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Admin audit is not properly logging unsetting of expiration date'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'User deletion is not handled properly everywhere'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Scoped apptokens can be changed by that very apptoken'

15 Jul 2021 timeline

1 ... 213 214 215 216 217 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.