The unofficial HackerOne disclosure Timeline

b'Basecamp' disclosed a bug submitted by b'zofrex'
b'Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.org'

10 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'blackbibin'
b'Password reset link not expiring after changing password in settings'

10 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'adhamsadaqah'
b'Tab nabbing in Hackerone inbox.'

09 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'iamr0000t'
b'PII data Leakage through hackerone reports '

09 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'twvyy3vyaw8k'
b'Local privilege escalation via insecure MSI file'

07 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Webauthn tokens are not removed on user deletion'

07 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Virtual Data Room / Hide download on collabora is easy to bypass'

07 Aug 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'j0v'
b'Loading YAML in Java client can lead to command execution'

07 Aug 2021 timeline

b'Mattermost' disclosed a bug submitted by b'shielder'
b'Mattermost Server OAuth Flow Cross-Site Scripting'

06 Aug 2021 timeline

b'Uber' disclosed a bug submitted by b'0xprial'
b'CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.com'

05 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'tomvg'
b'Partial report contents leakage - via HTTP/2 concurrent stream handling'

05 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'sunil_yedla'
b'Private program disclosure through notifications'

05 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'frozensolid'
b"Mishandling of hackerone clear background checks resulting in disclosure of other hacker's information"

05 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'aapo'
b'Acronis True Image (Windows) does not validate server certificate on a TLS connection'

05 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'none_of_the_above'
b'Internal Gitlab Ticket Disclosure via External Slack Channels'

04 Aug 2021 timeline

b'Snapchat' disclosed a bug submitted by b'sicarius'
b'Bypass Rate Limits on app.snapchat.com API Endpoint via X-Forwarded-For Header'

04 Aug 2021 timeline

b'MTN Group' disclosed a bug submitted by b'light4kira'
b'Disclosure of internal information using hidden NTLM authentication leading to an exploit server'

04 Aug 2021 timeline

b'Slack' disclosed a bug submitted by b'shell_c0de'
b'Private application files can be uploaded to Slack via malicious uploader'

04 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'brdoors3'
b"Information disclosure - Feedback is accessible on Public profile even after 'disallowed' at https://hackerone.com/settings/feedback"

03 Aug 2021 timeline

b'Elastic' disclosed a bug submitted by b'superman85'
b'[Swiftype] - Stored XSS via document field `url` triggers on `https://app.swiftype.com/engines/<engine>/document_types/<type>/documents/<id>`'

03 Aug 2021 timeline

1 ... 214 215 216 217 218 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.