The unofficial HackerOne disclosure Timeline

b'MTN Group' disclosed a bug submitted by b'lu3ky-13'
b'Reflected XSS on gamesclub.mtn.com.g'

24 May 2021 timeline

b'MTN Group' disclosed a bug submitted by b'lu3ky-13'
b'Reflected XSS on mtnhottseat.mtn.com.gh'

24 May 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b'CSRF .'

23 May 2021 timeline

b'Ubiquiti Inc.' disclosed a bug submitted by b'fr33rh'
b'View Only to Root Privilege Escalation on UniFi Protect'

23 May 2021 timeline

b'Ubiquiti Inc.' disclosed a bug submitted by b'fr33rh'
b'SNMP Community String Disclosure to ReadOnly Users on EdgeSwitch'

23 May 2021 timeline

b'Ubiquiti Inc.' disclosed a bug submitted by b'fr33rh'
b'Readonly to Root Privilege Escalation on EdgeSwitch'

23 May 2021 timeline

b'Ubiquiti Inc.' disclosed a bug submitted by b'fr33rh'
b'Web Server Predictable Session ID on EdgeSwitch '

23 May 2021 timeline

b'QIWI' disclosed a bug submitted by b'myway'
b'SSRF https://qiwi.com "Prerender HAR Capturer"'

22 May 2021 timeline

b'BlockFi' disclosed a bug submitted by b'tcbutler320'
b'User Information Disclosure via waitlist.blockfi.com Prefinery Abuse'

21 May 2021 timeline

b'GitLab' disclosed a bug submitted by b'ledz1996'
b'Kroki Arbitrary File Read/Write '

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jorgectf'
b'[Python] CWE-400: Regular Expression Injection'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'[Java] CWE-078: Add JSch lib OS Command Injection sink'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun'
b'[Java]: CWE-601 Spring url redirection detect'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-094: Jython code injection'

21 May 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-094: Rhino code injection'

21 May 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'golim'
b'Several domains on kaspersky.com are vulnerable to Web Cache Deception attack'

20 May 2021 timeline

b'U.S. General Services Administration' disclosed a bug submitted by b'rajeshpatil'
b'Weak password policy leading to exposure of administrator account access'

20 May 2021 timeline

b'QIWI' disclosed a bug submitted by b'sniper302'
b'Account takeover just through csrf in https://booking.qiwi.kz/profile'

20 May 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar'
b'Improper Access Control on Lark Footer Feature'

18 May 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sonarsource'
b'Pre-Auth Blind NoSQL Injection leading to Remote Code Execution'

18 May 2021 timeline

1 ... 233 234 235 236 237 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.