The unofficial HackerOne disclosure Timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jorgectf'
b'[Python] CWE-400: Regular Expression Injection'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'[Java] CWE-078: Add JSch lib OS Command Injection sink'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun'
b'[Java]: CWE-601 Spring url redirection detect'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-094: Jython code injection'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-094: Rhino code injection'

21 May 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'golim'
b'Several domains on kaspersky.com are vulnerable to Web Cache Deception attack'

20 May 2021 timeline

b'U.S. General Services Administration' disclosed a bug submitted by b'rajeshpatil'
b'Weak password policy leading to exposure of administrator account access'

20 May 2021 timeline

b'QIWI' disclosed a bug submitted by b'sniper302'
b'Account takeover just through csrf in https://booking.qiwi.kz/profile'

20 May 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Improper Access Control on Lark Footer Feature'

18 May 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sonarsource'
b'Pre-Auth Blind NoSQL Injection leading to Remote Code Execution'

18 May 2021 timeline

b'UPchieve' disclosed a bug submitted by b'shoaib_18'
b"No Valid SPF Records/don't have DMARC record"

18 May 2021 timeline

b'Twitter' disclosed a bug submitted by b'iambouali'
b'Bypass t.co link shortener in Twitter direct messages'

18 May 2021 timeline

b'CS Money' disclosed a bug submitted by b'gatolouco'
b'Previously created sessions continue being valid after MFA activation'

18 May 2021 timeline

b'WordPress' disclosed a bug submitted by b'sonarsource'
b'Authenticated XXE'

18 May 2021 timeline

b'Starbucks' disclosed a bug submitted by b'elber'
b'Japan - CSRF in webapp.starbucks.co.jp with user interaction could leak an access token if the user was not using Chrome'

18 May 2021 timeline

b'Valve' disclosed a bug submitted by b'simonscannell'
b'CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP download'

17 May 2021 timeline

b'WordPress' disclosed a bug submitted by b'hoangkien1020'
b'Privilege Escalation via REST API to Administrator leads to RCE'

17 May 2021 timeline

b'Informatica' disclosed a bug submitted by b'rawezh_ali'
b'Cross site scripting '

17 May 2021 timeline

b'UPchieve' disclosed a bug submitted by b'mr-zero'
b'User enumeration through forget password'

16 May 2021 timeline

b'Sifchain' disclosed a bug submitted by b'b29z'
b'Open S3 Bucket | information leakage'

15 May 2021 timeline

1 ... 232 233 234 235 236 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.