The unofficial HackerOne disclosure Timeline

b'Twitter' disclosed a bug submitted by b'mirhat'
b"Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co"

26 May 2021 timeline

b'TikTok' disclosed a bug submitted by b'probatorem'
b'CSRF on TikTok Ads Portal'

26 May 2021 timeline

b'Helium' disclosed a bug submitted by b'th0roid'
b'SSRF By adding a custom integration on console.helium.com'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'tounsi_007'
b'Account takeover on [support2.ucs.ru]'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'aapo'
b' Disk-o Cloud application (Windows) does not validate server certificate on a TLS connection'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'bombon'
b'[https://geekbrains.ru/profile] - authenticity_token not tied to user session leads to CSRF attacks'

26 May 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Talk discloses turn server to anybody'

26 May 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Nextcloud deck sharee search leaks searches to lookupserver by default'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'igorpyan'
b'[com.icq.mobile.client] '

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22901: TLS session caching disaster'

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22898: TELNET stack contents disclosure'

26 May 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2021-22897: schannel cipher selection surprise'

26 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'0nlymohammed'
b'Development configurations file with a sensitive data exposure could be leads to take down the social media accounts and the DB'

25 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'organdonor'
b'Blind SQL injection on [city-mobil.ru/taxiserv/] in filter{"id_locality"}'

25 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'organdonor'
b'Blind SQL in id_locality GET param on [city-mobil.ru/taxiserv]'

25 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'alexeysergeevich'
b'[la.mail.ru] - SSRF + cookie'

25 May 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'hacker-yadav'
b'No Rate Limit On Forgot Password Page'

24 May 2021 timeline

b'New Relic' disclosed a bug submitted by b'itsz4x'
b'HTML Injection In Email In one.newrelic.com'

24 May 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'yukusawa18'
b'Debug Mode Leak Critical Information [ AWS Keys , SMTP , Database , Django Secret Key ( RCE ) , Dodoc , Telegram , Twilio .. ]'

24 May 2021 timeline

b'GitLab' disclosed a bug submitted by b'saltyyolk'
b'Arbitrary file read during project import'

24 May 2021 timeline

1 ... 232 233 234 235 236 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.