The unofficial HackerOne disclosure Timeline

b'Kubernetes' disclosed a bug submitted by b'bradgeesaman'
b'API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpoint'

01 Apr 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'danielsagi'
b'Kubelet follows symlinks as root in /var/log from the /logs server endpoint '

01 Apr 2021 timeline

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer'
b'SocialClub Account Take Over Through Import Friends feature'

01 Apr 2021 timeline

b'Moneybird' disclosed a bug submitted by b'bugera'
b'Access control issue on invoice documents downloading feature.'

01 Apr 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'theevilbit'
b'KIS for macOS is vulnerable to AV bypass due to improper client authorization on XPC service'

01 Apr 2021 timeline

b'Courier' disclosed a bug submitted by b'everybodyhurts'
b'[OPEN S3 BUCKET] All uploaded files are public. '

01 Apr 2021 timeline

b'Khan Academy' disclosed a bug submitted by b'4z1zu'
b"Khan Academy ClickJacking to Steal Users's Credintials"

31 Mar 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'supr4s'
b'HTML Injection on "polls" app - comments section (possibly XSS)'

31 Mar 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'abbadeed'
b'A vulnerability in KAVKIS 2020 products family allows full disabling of protection'

31 Mar 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sectex'
b'Account takeover via XSS'

31 Mar 2021 timeline

b'QIWI' disclosed a bug submitted by b'okradze'
b'crlf injection https://bug.qiwi.com'

31 Mar 2021 timeline

b'QIWI' disclosed a bug submitted by b'okradze'
b'mysql.initial.sql file is accessable for everyone'

31 Mar 2021 timeline

b'pixiv' disclosed a bug submitted by b'noxx'
b'Reset any password'

31 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'Vulnerability in Private Data Endorsement Policy Management in Hyperledger Fabric 2.0'

30 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'The payload Field of Transactions in a Block Reveals the Private Data to All Peers '

30 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'Vulnerabilities in Endorsement Mechanism of Private Data Related Transactions in Hyperledger Fabric 2.0'

30 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Chained vulnerabilities create DOS attack against users on desafio5estrelas.com'

30 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Cleartext password exposure allows access to the desafio5estrelas.com admin panel'

30 Mar 2021 timeline

b'CS Money' disclosed a bug submitted by b'sawmj'
b'Origin IP found, Cloudflare bypassed'

30 Mar 2021 timeline

b'Acronis' disclosed a bug submitted by b'atikna'
b'Account Confirmation bypass leads to acess some fucntionality '

30 Mar 2021 timeline

1 ... 239 240 241 242 243 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.