The unofficial HackerOne disclosure Timeline

b'Shopify' disclosed a bug submitted by b'sandeep_rj49'
b'Low Privileged user can add or remove cash to/from sales register'

16 Jun 2021 timeline

b'Ping Identity' disclosed a bug submitted by b'awararesearcher'
b"Broken Link on Ping Identity's Vulnerability Submission Form on Hackerone"

16 Jun 2021 timeline

b'Pornhub' disclosed a bug submitted by b'wh0ru'
b'XSS via JavaScript evaluation of an attacker controlled resource at www.pornhub.com'

16 Jun 2021 timeline

b'Urban Company' disclosed a bug submitted by b't3chn0phil3'
b'Private ip leaking through response'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Android app does not clear end to end encryption keys'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Trusted server shared secret stored unencrypted in the database'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Federated shares are not password protected'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Ransomware protection is missing extentions'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'No admin audit log for auth tokens'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'No admin audit entry for enabling/disabling 2FA'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Session fixation on public talk links'

16 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Serverinfo endpoints are not bruteforce protected nor are tokens properly generated'

16 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'g4urav_19'
b'Error Page Content Spoofing or Text Injection'

15 Jun 2021 timeline

b'UPchieve' disclosed a bug submitted by b'shivanshmalik2'
b'Clickjacking on profile page leading to unauthorized changes'

15 Jun 2021 timeline

b'TTS Bug Bounty' disclosed a bug submitted by b'kq8dq'
b'Denial of service via cache poisoning on https://www.data.gov/'

15 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sazouki'
b'Reflected XSS through ClickJacking'

15 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fiveguyslover'
b'XML Injection / External Service Interaction (HTTP/DNS) On https://.mil'

15 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'the_boschko'
b'Default Admin Username and Password on Server at mil'

15 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite'
b'Elmah.axd is publicly accessible leaking Error Log'

15 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Default Nextcloud Server and Android Client leak sharee searches to Nextcloud'

15 Jun 2021 timeline

1 ... 226 227 228 229 230 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.