The unofficial HackerOne disclosure Timeline

b'Avito' disclosed a bug submitted by b'kxyry'
b'[avito.ru] ImageMagick uninitialized image palette'

24 Apr 2021 timeline

b'U.S. General Services Administration' disclosed a bug submitted by b'alihassam95'
b'IDOR at training.smartpay.gsa.gov/reports/quizzes-taken-by-user'

24 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'stanhates'
b'relap.io/admin/api - API '

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'tounsi_007'
b'Account Takeover on [ls5-dev.ucs.ru]'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'mkhazov'
b'Bitbucket public repo leaking credentials from the 1C Enterprise system used by Samokat'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'tounsi_007'
b'Brute Force due to Weak security credentials lead access to LICENSE SYSTEM Web Server on [l.ucs.ru]'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'kanytu'
b'Private file read through file attachment'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b'IDOR to edit test/poll/quiz on relap.io'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b'IDOR to delete test/poll/quiz on relap.io'

23 Apr 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'dvorakxl'
b'Stored xss in calendar via call link'

23 Apr 2021 timeline

b'GitLab' disclosed a bug submitted by b'circuit'
b'XSS in request approvals'

23 Apr 2021 timeline

b'Brave Software' disclosed a bug submitted by b'kanytu'
b'Cookie steal through content Uri'

22 Apr 2021 timeline

b'Twitter' disclosed a bug submitted by b'a13h1'
b'PI leakage By Brute Forcing and Phone number deleting without using password'

22 Apr 2021 timeline

b'Basecamp' disclosed a bug submitted by b'hensis'
b'Lack of quarantine macOS attribute(com.apple.quarantine) leads multiple issues including RCE'

22 Apr 2021 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'ryotak'
b"RCE in 'Copy as Node Request' BApp via code injection"

22 Apr 2021 timeline

b'Panther Labs' disclosed a bug submitted by b'run_win'
b'Broken Link Hijacking on Twitter link'

22 Apr 2021 timeline

b'Homebrew' disclosed a bug submitted by b'ryotak'
b'Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official taps'

21 Apr 2021 timeline

b'Clario' disclosed a bug submitted by b'beerboy_ankit'
b'Social media link hijack of team member [Linkedin] at https://mackeeper.com/team/'

21 Apr 2021 timeline

b'Ruby' disclosed a bug submitted by b'chinarulezzz'
b"'net/ftp': Uncontrolled Resource Consumption (Memory/CPU)"

21 Apr 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hacker_as980'
b'CSRF in https://'

20 Apr 2021 timeline

1 ... 239 240 241 242 243 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.