The unofficial HackerOne disclosure Timeline

b'UPchieve' disclosed a bug submitted by b'riski0912'
b'CORS Misconfiguration, could lead to disclosure of sensitive information'

09 Jun 2021 timeline

b'Slack' disclosed a bug submitted by b'showuon'
b'Header modification results in disclosure of Slack infra metadata to unauthorized parties'

09 Jun 2021 timeline

b'HackerOne' disclosed a bug submitted by b'h13-'
b'Private program disclosure of `` through notifications'

09 Jun 2021 timeline

b'MTN Group' disclosed a bug submitted by b'droop3r'
b'Cross-Site Scripting through search form on mtnplay.co.zm'

08 Jun 2021 timeline

b'Showmax' disclosed a bug submitted by b'abdulsec'
b'bypass parental pin succesfully'

07 Jun 2021 timeline

b'Showmax' disclosed a bug submitted by b'abhiram'
b'https://secure.showmax.com/profile/payments'

07 Jun 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'impalanichamy'
b'Acessed internal api documentation and information'

06 Jun 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'mvm'
b'XSS (reflected, and then, cookie persisted) on api documentation site theme selector (old version of dokuwiki)'

06 Jun 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'a1c3venomvirus'
b'prometheus server monitoring System publicly accessible'

06 Jun 2021 timeline

b'Shopify' disclosed a bug submitted by b'jmp_35p'
b'Add new development stores without permission'

04 Jun 2021 timeline

b'GlassWire' disclosed a bug submitted by b'dawouw'
b'Uncontrolled Search Path Element allows DLL hijacking for priv esc to SYSTEM'

04 Jun 2021 timeline

b'QIWI' disclosed a bug submitted by b'nowsafe'
b'account impersonate through broken link'

04 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_'
b'Insufficient Session Expiration on Adobe Connect | https://'

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'CVE-2019-3403 on https:///rest/api/2/user/picker?query='

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'1337n0x'
b'Blind SQL iNJECTION '

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite'
b'Reflected XSS'

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fr1nge'
b'Web Cache Poisoning on '

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Remote Code Execution via Insecure Deserialization in Telerik UI (CVE-2019-18935)'

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Reflected XSS at www. at / via the parameter'

03 Jun 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'Reflected XSS through clickjacking at https://'

03 Jun 2021 timeline

1 ... 228 229 230 231 232 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.