The unofficial HackerOne disclosure Timeline

b'Valve' disclosed a bug submitted by b'nyancat0131'
b'[GoldSrc] Remote Code Execution using malicious WAD list in BSP file'

04 May 2021 timeline

b'Valve' disclosed a bug submitted by b'slidybat'
b'OOB reads in network message handlers leads to RCE'

04 May 2021 timeline

b'Flickr' disclosed a bug submitted by b'sector035'
b'Improper access control in place for "member only" groups via root.YUI_config.flickr.api.site_key'

03 May 2021 timeline

b'Flickr' disclosed a bug submitted by b'xparrot'
b'Stored open redirect in about page'

03 May 2021 timeline

b'Moneybird' disclosed a bug submitted by b'cityzen0x'
b'No rate Limit'

03 May 2021 timeline

b'Pornhub' disclosed a bug submitted by b'iamthefrogy'
b'[xss, pornhub.com] /, multiple parameters'

02 May 2021 timeline

b'8x8' disclosed a bug submitted by b'ian'
b'Subdomain takeover of .wavecell.com'

02 May 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'r44mb00'
b'Code Injection via Insecure Yaml.load'

01 May 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'SSRF - Unchecked Snippet IDs for distributed files'

01 May 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'XSS - Calendar - Unescaped common name of appointment participant'

01 May 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'XSS - Notes - Attribute injection through overlapping tags'

01 May 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'XSS - Search - Unescaped contact job'

01 May 2021 timeline

b'Twitter' disclosed a bug submitted by b'nagli'
b'Open Redirect on https://www.twitterflightschool.com/widgets/experience?destination_url=https://evil.com'

01 May 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'rtod'
b'Nextcloud update checks leaks information'

01 May 2021 timeline

b'PayPal' disclosed a bug submitted by b'bagipro'
b'Unsafe deserialization leads to token leakage in PayPal & PayPal for Business [Android]'

30 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'0x7'
b'[web.icq.com] Stored XSS in Account Name'

30 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'order1000'
b'Gitlab search exposing personal data of employees on gitlab-edu.geekbrains.ru'

30 Apr 2021 timeline

b'Homebrew' disclosed a bug submitted by b'nightwatch-cybersecurity'
b'Brew bootstrap process is insecure'

30 Apr 2021 timeline

b'curl' disclosed a bug submitted by b'mingtao'
b'CVE-2021-22890: TLS 1.3 session ticket proxy host mixup'

30 Apr 2021 timeline

b'curl' disclosed a bug submitted by b'vsz'
b'CVE-2021-22876: Automatic referer leaks credentials'

30 Apr 2021 timeline

1 ... 237 238 239 240 241 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.