The unofficial HackerOne disclosure Timeline

b'LINE' disclosed a bug submitted by b'alexbirsan'
b'Arbitrary Code Execution via npm misconfiguration installing internal libraries from the public registry'

05 Jul 2021 timeline

b'Node.js' disclosed a bug submitted by b'ericsesterhenn'
b'OOB read in libuv'

05 Jul 2021 timeline

b'LINE' disclosed a bug submitted by b's5s'
b'Webview in LINE client for iOS will render application/octet-stream files as HTML'

05 Jul 2021 timeline

b'New Relic' disclosed a bug submitted by b'ashmek'
b'Account takeover by using abandoned email id of victim which has already been changed to new by victim himself on one.newrelic.com'

02 Jul 2021 timeline

b'Node.js' disclosed a bug submitted by b'deepsurface-robert'
b'Node Installer Local Privilege Escalation '

01 Jul 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'sjw'
b'Ratelimiting can be bypassed using IPv6 subnets'

01 Jul 2021 timeline

b'Glassdoor' disclosed a bug submitted by b'l0cpd'
b'Reflected XSS on https://help.glassdoor.com/GD_HC_EmbeddedChatVF'

01 Jul 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prophet'
b'IDOR while uploading attachments at []'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prophet'
b'Reflected XSS at []'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'biest'
b'Self stored Xss + Login Csrf'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'CSRF Based XSS @ https://'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'celesian'
b'[www.] Reflected Cross-Site Scripting'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'qdoan95'
b'Unauthorized access to admin panel of the Questionmark Perception system at https://'

30 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'celesian'
b'[] Reflected Cross-Site Scripting Vulnerability'

30 Jun 2021 timeline

b'HackerOne' disclosed a bug submitted by b'clubbable'
b'Report Bulk endpoint "agree-on-going-public" action may reveal Report disclosure state for invite-only programs'

30 Jun 2021 timeline

30 Jun 2021 timeline

30 Jun 2021 timeline

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'iamthefrogy'
b'CVE-2019-11248 on alertmanager.ev-cloud-platform.engelvoelkers.com'

30 Jun 2021 timeline

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'mikkocarreon'
b'Blind SSRF on infodesk.engelvoelkers.com via proxy.php'

30 Jun 2021 timeline

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'b1ackgamba'
b'XXE on www.publish.engelvoelkers.com'

30 Jun 2021 timeline

1 ... 222 223 224 225 226 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.