The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'foobar7'
b'Bypass of privacy filter / tracking pixel blocker'

11 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'public webdav endpoint not bruteforce protected'

11 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'index.php/apps/files_sharing/shareinfo endpoint is not properly protected'

11 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'foobar7'
b'Download of file with arbitrary extension via injection into attachment header'

11 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'lukasreschkenc'
b'Ratelimits do not apply to OCS DataResponse'

11 Aug 2021 timeline

b'Valve' disclosed a bug submitted by b'drbrix'
b'Modify in-flight data to payment provider Smart2Pay'

10 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'aapo'
b'Acronis True Image 2021 (windows) does not validate server hostname on a login TLS connection'

10 Aug 2021 timeline

b'UPchieve' disclosed a bug submitted by b'n1had'
b'Password reset token leak on third party website via Referer header'

10 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'blackbibin'
b'Login session not expire'

10 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'zofrex'
b'Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.org'

10 Aug 2021 timeline

b'Basecamp' disclosed a bug submitted by b'blackbibin'
b'Password reset link not expiring after changing password in settings'

10 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'adhamsadaqah'
b'Tab nabbing in Hackerone inbox.'

09 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'iamr0000t'
b'PII data Leakage through hackerone reports '

09 Aug 2021 timeline

b'Acronis' disclosed a bug submitted by b'twvyy3vyaw8k'
b'Local privilege escalation via insecure MSI file'

07 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Webauthn tokens are not removed on user deletion'

07 Aug 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Virtual Data Room / Hide download on collabora is easy to bypass'

07 Aug 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'j0v'
b'Loading YAML in Java client can lead to command execution'

07 Aug 2021 timeline

b'Mattermost' disclosed a bug submitted by b'shielder'
b'Mattermost Server OAuth Flow Cross-Site Scripting'

06 Aug 2021 timeline

b'Uber' disclosed a bug submitted by b'0xprial'
b'CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.com'

05 Aug 2021 timeline

b'HackerOne' disclosed a bug submitted by b'tomvg'
b'Partial report contents leakage - via HTTP/2 concurrent stream handling'

05 Aug 2021 timeline

1 ... 215 216 217 218 219 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.