The unofficial HackerOne disclosure Timeline

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap'
b'[go]: Add query for detecting CORS misconfiguration'

16 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Ransomware protection is missing extentions take 2'

16 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'[Java] CWE-918: Added URLClassLoader and WebClient SSRF sinks'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun'
b'[Java] JShell Injection'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'timolesml'
b'[Java]: CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty'

15 Jul 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Admin audit is not properly logging unsetting of expiration date'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'User deletion is not handled properly everywhere'

15 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Scoped apptokens can be changed by that very apptoken'

15 Jul 2021 timeline

b'Basecamp' disclosed a bug submitted by b'princej_76'
b'Error Page Content Spoofing or Text Injection '

14 Jul 2021 timeline

b'Twitter' disclosed a bug submitted by b'jaka_tingkir'
b'[Bypass fixed #664038 and #519059] Application settings change settings that have been set by the user'

13 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'ajxchapman'
b'FogBugz import attachment full SSRF requiring vulnerability in *.fogbugz.com'

13 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'yvvdwf'
b'Stored-XSS in merge requests'

13 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'yvvdwf'
b'Stored-XSS on wiki pages'

13 Jul 2021 timeline

b'Ruby' disclosed a bug submitted by b'chinarulezzz'
b"OS Command Injection in 'rdoc' documentation generator"

13 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'taraszelyk'
b'Client-Side DOS via Mermaid Prototype Pollution vulnerability'

12 Jul 2021 timeline

b'GitLab' disclosed a bug submitted by b'taraszelyk'
b'Stored DOM XSS via Mermaid chart'

12 Jul 2021 timeline

b'Shopify' disclosed a bug submitted by b'danishalkatiri'
b'your-store.myshopify.com preview link is leak on third party website lead to preview all action from store owner Without store Password.'

12 Jul 2021 timeline

b'Topcoder' disclosed a bug submitted by b'c0mbo'
b'Reflected XSS in https://www.topcoder.com/blog/category/community-stories/'

12 Jul 2021 timeline

1 ... 220 221 222 223 224 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.