the unofficial HackerOne disclosure timeline.

X
b'U.S. General Services Administration' disclosed a bug submitted by b'skarsom' 
b'TAMS registration details API for admins open at https://tamsapi.gsa.gov/user/tams/api/usermgmnt/pendingUserDetails/'
07 May 2021 timeline
b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'[CS:GO] Unchecked texture file name with TEXTUREFLAGS_DEPTHRENDERTARGET can lead to Remote Code Execution'
06 May 2021 timeline
b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'[Source Engine] Material path truncation leads to Remote Code Execution'
06 May 2021 timeline
b'Sifchain' disclosed a bug submitted by b'a-heybati' 
b'xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of service'
06 May 2021 timeline
b'Mail.ru' disclosed a bug submitted by b'b404c057ae68e03c3dc721d' 
b'CVE-2020-3187 ip 91.231.115.30'
06 May 2021 timeline
b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://top.mail.ru/edit? for site counter (Rate Limit bypass via IP Rotation)'
06 May 2021 timeline
b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Clickjacking Vulnerability via https://profile.my.games/gamecenter/profile/ can lead to sensitive cross site actions (Bypass X-Frame-Options)'
06 May 2021 timeline
b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://mirror.w1.dwar.ru/login.php'
06 May 2021 timeline
b'Moneybird' disclosed a bug submitted by b'0xprial' 
b"Bypass of Rate limiting in secure_session endpoint's password input will lead to user password disclosure "
06 May 2021 timeline
b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Editing Pentest Summary Report Answers After Submitting Them'
06 May 2021 timeline
b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Changing the 2FA secret key and backup codes without knowing the 2FA OTP'
06 May 2021 timeline
b'Valve' disclosed a bug submitted by b'gamer7112' 
b'Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source Games'
05 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management When Using Bit Operations'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'[Java] CWE-094: Query to detect Groovy Code Injections'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'Java: JSONP Injection'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'artem' 
b'[Java] Query for detecting Jakarta Expression Language injections'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-348: Use of less trusted source'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management After Refactoring The Code'
04 May 2021 timeline
b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[JAVA]: CWE-347 - Improper Verification of Cryptographic Signature : Potential for Auth Bypass'
04 May 2021 timeline
b'Valve' disclosed a bug submitted by b'pixelindigo' 
b'GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE'
04 May 2021 timeline
1 ... 236 237 238 239 240 ... 774
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!
Twitter
BY DENIS WERNER - @NOBBD - IMPRESSUM