The unofficial HackerOne disclosure Timeline

b'Node.js' disclosed a bug submitted by b'omicronenergy'
b"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"

15 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'derision'
b'SQL Injection at https://lite.r-keeper.ru/site_api/localize/translate/rklscommon/ru'

14 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'moshakes'
b'Exposed Git Repo at https://mini-app.delivery-club.ru'

14 Mar 2021 timeline

b'Kartpay' disclosed a bug submitted by b'bugera'
b'Duplicate Entry of email leads to 500 Server Error which disclosing the SQL Database table information'

14 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind'
b'MCS Graphite SSRF: internal network access'

13 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'darknight776'
b'Subdomain takeover http://promo.instamart.ru/'

13 Mar 2021 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[plain-object-merge] Prototype pollution'

13 Mar 2021 timeline

b'Dropbox' disclosed a bug submitted by b'prateek_0490'
b'Leaking API_KEY of testrail of HelloSign gives read/write access'

13 Mar 2021 timeline

b'Bumble' disclosed a bug submitted by b'ndrong'
b'Bumble API exposes read status of chat messages'

13 Mar 2021 timeline

b'Shopify' disclosed a bug submitted by b'francisbeaudoin'
b'Informations disclosure - Access to some checkout informations'

13 Mar 2021 timeline

b'Trint Ltd' disclosed a bug submitted by b'prophet'
b'Leak of Internal IP addresses'

12 Mar 2021 timeline

b'Liberapay' disclosed a bug submitted by b'sudipraj'
b'Failure to Invalid Session after Password Change'

12 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'secator'
b'[xss] content-type '

12 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'4lemon'
b'Customer domain information disclosure at https://biz.mail.ru/api/domains/*'

12 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap'
b'[codeql-go]: Add query to find use of constant state parameter in Oauth2 flow'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'Java: Fix NashornScriptEngine detection in ScriptEngine query'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-312: Query to detect cleartext storage of sensitive information using Android SharedPreferences'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-598: Use of GET Request Method with Sensitive Query Strings'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strlen.'

12 Mar 2021 timeline

1 ... 244 245 246 247 248 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.