The unofficial HackerOne disclosure Timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'XSS by MathML at Active Storage'

15 Jun 2021 timeline

b'Ruby on Rails' disclosed a bug submitted by b'komang4130'
b'HTTP Host injection in redirect_to function'

15 Jun 2021 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'Regex Injection from request header (Rack::Sendfile, send_file)'

15 Jun 2021 timeline

b'UPchieve' disclosed a bug submitted by b'n1had'
b'Cross-origin resource sharing misconfig | steal user information '

15 Jun 2021 timeline

b'Node.js' disclosed a bug submitted by b'sickcodes'
b'Unexpected input validation of octal literals in nodejs v15.12.0 and below returns defined values for all undefined octal literals.'

14 Jun 2021 timeline

b'MTN Group' disclosed a bug submitted by b'tandav'
b'XMLRPC, Enabling XPSA and Bruteforce and DOS + A file disclosing installer-logs.'

14 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'ibrahimauwal1'
b'Wrong implementation of Telegram link on the main page for PC users'

12 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'beebeek'
b'Flaws In Social media Icon on error page which can lead to financial loss to a company.'

12 Jun 2021 timeline

b'HackerOne' disclosed a bug submitted by b'hacker_ani3s'
b'Hackerone is not properly deleting user id'

11 Jun 2021 timeline

b'Acronis' disclosed a bug submitted by b'mmg'
b'SQL injection in https://www.acronis.cz/ via the log parameter'

11 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'emptymahbob'
b'CORS Misconfiguration Leads to Sensitive Exposure on Sifchain main domain'

10 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'ic4'
b'CORS (Cross-Origin Resource Sharing) origin validation failure -Any website can issue requests made with user credentials and read the responses to th'

10 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'za_sec'
b'Private eth key found'

10 Jun 2021 timeline

b'Sifchain' disclosed a bug submitted by b'zelzal'
b'HTTPS not enforced at dex.sifchain.finance'

10 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'File drop public link can also be converted to federated share'

10 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Attacker can obtain write access to any federated share/public link'

10 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Default settings leak federated cloud id to lookup server of all users'

10 Jun 2021 timeline

b'Acronis' disclosed a bug submitted by b'sbakhour'
b'Stored XSS in Acronis Cyber Protect Console'

10 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'End to end encryption folder locking is not properly protected'

10 Jun 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Trusted servers exchange can be triggered by attacker'

10 Jun 2021 timeline

1 ... 227 228 229 230 231 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.