The unofficial HackerOne disclosure Timeline

b'UPchieve' disclosed a bug submitted by b'zero_or_1'
b'Zero click account Takeover due to Api misconfiguration '

14 May 2021 timeline

b'UPchieve' disclosed a bug submitted by b'saajanbhujel'
b'Full account takeover of any user through reset password'

14 May 2021 timeline

b'GitLab' disclosed a bug submitted by b'vakzz'
b'RCE when removing metadata with ExifTool'

14 May 2021 timeline

b'8x8' disclosed a bug submitted by b'ian'
b'Subdomain takeover of .jitsi.net'

14 May 2021 timeline

b'Uber' disclosed a bug submitted by b'hunt4p1zza'
b'Request Access for Uber Device Returns Management Platform (https://www.eats-devicereturns.com/request-access/) Bypass Allows Access to PII'

14 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'himan253'
b"No Valid SPF Records/don't have DMARC record"

14 May 2021 timeline

b'Uber' disclosed a bug submitted by b'hunt4p1zza'
b'Unrestricted File Upload Results in Cross-Site Scripting Attacks'

14 May 2021 timeline

b'Uber' disclosed a bug submitted by b'bubbounty'
b"Corss-Tenant IDOR on Business allowing escalation privilege, invitation takeover, and edition of any other Businesses' employees"

14 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'aliyugombe'
b'No Rate Limit protection in user subscription form'

14 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'paranoid07'
b'Found a url on source code which was disclosing different juicy informations like ip addresses and available endponts'

14 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'caon'
b'Path Transversal inside saveContracts.js'

14 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'tmsm'
b'Email spoofing'

13 May 2021 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Lack warning label when receiving a letter'

13 May 2021 timeline

b'HackerOne' disclosed a bug submitted by b'muon4'
b'CSRF allows to test email forwarding'

13 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'immortalsurya'
b'Cross Origin Resource Sharing Misconfiguration | Lead to sensitive information.'

13 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'ibrahimauwal1'
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.finance'

13 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'itsme_ani'
b'CORS Misconfiguration'

12 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'tefa_'
b'Social media links not working'

12 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'cutedoggo'
b'SSRF at jira.plazius.ru - CVE-2019-8451'

12 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'n33dm0n3y'
b'Wrong Url in Main Page'

12 May 2021 timeline

1 ... 228 229 230 231 232 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.