The unofficial HackerOne disclosure Timeline

b'Moneybird' disclosed a bug submitted by b'bugera'
b'Access control issue on invoice documents downloading feature.'

01 Apr 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'theevilbit'
b'KIS for macOS is vulnerable to AV bypass due to improper client authorization on XPC service'

01 Apr 2021 timeline

b'Courier' disclosed a bug submitted by b'everybodyhurts'
b'[OPEN S3 BUCKET] All uploaded files are public. '

01 Apr 2021 timeline

b'Khan Academy' disclosed a bug submitted by b'4z1zu'
b"Khan Academy ClickJacking to Steal Users's Credintials"

31 Mar 2021 timeline

b'Nextcloud' disclosed a bug submitted by b'supr4s'
b'HTML Injection on "polls" app - comments section (possibly XSS)'

31 Mar 2021 timeline

b'Kaspersky' disclosed a bug submitted by b'abbadeed'
b'A vulnerability in KAVKIS 2020 products family allows full disabling of protection'

31 Mar 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'sectex'
b'Account takeover via XSS'

31 Mar 2021 timeline

b'QIWI' disclosed a bug submitted by b'okradze'
b'crlf injection https://bug.qiwi.com'

31 Mar 2021 timeline

b'QIWI' disclosed a bug submitted by b'okradze'
b'mysql.initial.sql file is accessable for everyone'

31 Mar 2021 timeline

b'pixiv' disclosed a bug submitted by b'noxx'
b'Reset any password'

31 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'Vulnerability in Private Data Endorsement Policy Management in Hyperledger Fabric 2.0'

30 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'The payload Field of Transactions in a Block Reveals the Private Data to All Peers '

30 Mar 2021 timeline

b'Hyperledger' disclosed a bug submitted by b'swang1994'
b'Vulnerabilities in Endorsement Mechanism of Private Data Related Transactions in Hyperledger Fabric 2.0'

30 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Chained vulnerabilities create DOS attack against users on desafio5estrelas.com'

30 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Cleartext password exposure allows access to the desafio5estrelas.com admin panel'

30 Mar 2021 timeline

b'CS Money' disclosed a bug submitted by b'sawmj'
b'Origin IP found, Cloudflare bypassed'

30 Mar 2021 timeline

b'Acronis' disclosed a bug submitted by b'atikna'
b'Account Confirmation bypass leads to acess some fucntionality '

30 Mar 2021 timeline

b'PlayStation' disclosed a bug submitted by b'pwrofwon'
b'Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of application'

30 Mar 2021 timeline

b'PlayStation' disclosed a bug submitted by b'vakzz'
b'Reflected XSS on transact.playstation.com using postMessage from the opening window'

30 Mar 2021 timeline

b'PlayStation' disclosed a bug submitted by b'bugdiscloseguys'
b'SSRF chained to hit internal host leading to another SSRF which allows to read internal images.'

30 Mar 2021 timeline

1 ... 246 247 248 249 250 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.