The unofficial HackerOne disclosure Timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'Java: Query for detecting unsafe deserialization with Spring exporters'

25 Mar 2021 timeline

b'HackerOne' disclosed a bug submitted by b'nagli'
b'Indexing of urls on the "External link warning" pages discloses many vulnerable endpoints from the past and unlisted videos/photos'

25 Mar 2021 timeline

b'Shipt' disclosed a bug submitted by b'1337n0x'
b'Api Token Leaked in [shoppers.shipt.com]'

25 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'p1006'
b'[int.ucs.ru] UCS Fiddler 217.25.235.214:7459'

25 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'p1006'
b'[int.ucs.ru] UCS Clickhouse'

25 Mar 2021 timeline

b'Shopify' disclosed a bug submitted by b'intidc'
b'[h1-2102] FQDN takeover on all Shopify wholesale customer domains by trailing dot (RFC 1034)'

25 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b' Confluence Skype'

25 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'act1on3'
b'[webvpn.city-srv.ru] Path traversal via CVE-2020-3452'

25 Mar 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'psych0tr1a'
b'Stored XSS in any message (leads to priv esc for all users and file leak + rce via electron app)'

25 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pudsec'
b'Reflected XSS at https:////...'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'brbsainath'
b'Unauth RCE on Jenkins Instance at https:///'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'spongebhav'
b'CVE-2021-26855 on resulting in SSRF'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'spongebhav'
b'SSRF due to CVE-2021-26855 on '

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'i_am_no__one'
b'Misconfigured AWS S3 bucket leaks senstive data such of admin, Prdouction,beta, localhost and many more directories....'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sleepnotf0und'
b'Self XSS + CSRF Leads to Reflected XSS in https:/// '

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'al-madjus'
b'Git repo on https://.mil/ discloses API password'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'Blind Stored XSS Payload fired at the backend on https:///'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lu3ky-13'
b'CSRF to Cross-site Scripting (XSS)'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lu3ky-13'
b'CSRF to Cross-site Scripting (XSS)'

24 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bughunterlabs'
b'[CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.'

24 Mar 2021 timeline

1 ... 241 242 243 244 245 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.