The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'jin0ne'
b'Bypass the reverse proxy. Request admin'

24 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'01alsanosi'
b' unauthorized Access To Elastic DB '

22 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'login-denied'
b'XSS via POST request to https://account.mail.ru/signup/'

20 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'sharmaz'
b'mail.ru/touch xss(r) debug parameter'

20 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'complex'
b'o2.mail.ru XSS'

20 Mar 2021 timeline

b'Bitso' disclosed a bug submitted by b'mohit0786'
b'Broken link hijack'

20 Mar 2021 timeline

b'TikTok' disclosed a bug submitted by b'nagli'
b'HTML Injection through Account Name field on TikTok ads portal being rendered on emails'

19 Mar 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'jin0ne'
b'Reflected XSS on Lark Suite'

19 Mar 2021 timeline

b'Zivver' disclosed a bug submitted by b'stiltz'
b'Bypass MFA requirement to send messages'

19 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'neex'
b'file read on MCS servers via supplying a QCOW2 image with external backing file'

19 Mar 2021 timeline

b'Mattermost' disclosed a bug submitted by b'stregh'
b'[mattermost.com] CORS Misconfiguration leakage of admin users'

19 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'act1on3'
b'[city-mobil.ru/taxiserv/] SQLi at /taxiserv/requests path at driver_company param'

19 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'act1on3'
b'[city-mobil.ru/taxiserv/] SQLi at /taxiserv/tariffs/dictionary at filter{"id_locality"} param'

19 Mar 2021 timeline

b'Dropbox' disclosed a bug submitted by b'wesamahmed_2'
b'[www.dropboxforum.com] - reflected XSS in search'

19 Mar 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'jin0ne'
b'Server Side Request Forgery'

18 Mar 2021 timeline

b'HackerOne' disclosed a bug submitted by b'jobert'
b'Stored Cross-Site Scripting vulnerability in example Custom Digital Agreement'

18 Mar 2021 timeline

b'HackerOne' disclosed a bug submitted by b'sodium_'
b'"Bounty splitting enabled" can discloses if public VDPs are running private VRP'

18 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'sniper302'
b'Full Account Takeover Student Account In https://uchi.ru/signin/main/student/email'

18 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'zerody'
b'Eval-based XSS in Game JS API (mailru.core.js) via cross-origin postMessage()'

18 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'k3ypt0'
b'SQL injection delivery-club.ru (ClickHouse)'

18 Mar 2021 timeline

1 ... 242 243 244 245 246 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.