The unofficial HackerOne disclosure Timeline

b'Uber' disclosed a bug submitted by b'0xprial'
b'IDOR leads to See analytics of Loyalty Program in any restaurant.'

28 May 2021 timeline

b'VK.com' disclosed a bug submitted by b'bagipro'
b'[VK Android] Access to app protected components leads to arbitrary code execution'

27 May 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'javierprovecho'
b'Bypass apiserver proxy filter'

27 May 2021 timeline

b'Valve' disclosed a bug submitted by b'chaynik'
b'RCE on CS:GO client using unsanitized entity ID in EntityMsg message'

27 May 2021 timeline

b'Valve' disclosed a bug submitted by b'chaynik'
b'Signedness issue in ClassInfo message handler leads to RCE on CS:GO client'

27 May 2021 timeline

b'OpenMage' disclosed a bug submitted by b'xenx'
b'CSRF in changing password after using reset password link'

27 May 2021 timeline

b'MariaDB' disclosed a bug submitted by b'dtattoedhackers'
b'Git Config'

27 May 2021 timeline

b'PlayStation' disclosed a bug submitted by b'm00nbsd'
b'SMAP bypass'

27 May 2021 timeline

b'Twitter' disclosed a bug submitted by b'mirhat'
b"Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co"

26 May 2021 timeline

b'TikTok' disclosed a bug submitted by b'probatorem'
b'CSRF on TikTok Ads Portal'

26 May 2021 timeline

b'Helium' disclosed a bug submitted by b'th0roid'
b'SSRF By adding a custom integration on console.helium.com'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'tounsi_007'
b'Account takeover on [support2.ucs.ru]'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'aapo'
b' Disk-o Cloud application (Windows) does not validate server certificate on a TLS connection'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'bombon'
b'[https://geekbrains.ru/profile] - authenticity_token not tied to user session leads to CSRF attacks'

26 May 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Talk discloses turn server to anybody'

26 May 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Nextcloud deck sharee search leaks searches to lookupserver by default'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'igorpyan'
b'[com.icq.mobile.client] '

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22901: TLS session caching disaster'

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22898: TELNET stack contents disclosure'

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22897: schannel cipher selection surprise'

26 May 2021 timeline

1 ... 225 226 227 228 229 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.