The unofficial HackerOne disclosure Timeline

b'GitLab' disclosed a bug submitted by b'hx01'
b'Ability To Delete User(s) Account Without User Interaction'

17 Mar 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'base_64'
b'Messages disclosure via search feature of other users group(Cross-Tenant).'

17 Mar 2021 timeline

b'VK.com' disclosed a bug submitted by b'onlymalelove'
b'Stored XSS (m.vk.com)'

17 Mar 2021 timeline

b'TikTok' disclosed a bug submitted by b'dphoeniixx'
b'Multiple bugs leads to RCE on TikTok for Android'

17 Mar 2021 timeline

b'pixiv' disclosed a bug submitted by b'chaosbolt'
b'RCE due to ImageTragick v2'

16 Mar 2021 timeline

b'Revive Adserver' disclosed a bug submitted by b'solov9ev'
b'Reflected XSS on /admin/stats.php'

16 Mar 2021 timeline

b'Revive Adserver' disclosed a bug submitted by b'solov9ev'
b'Reflected XSS on /admin/campaign-zone-zones.php'

16 Mar 2021 timeline

b'Acronis' disclosed a bug submitted by b'adr'
b'Arbitrary file creation via symlink attack on syncagentsrv (Acronis Sync Agent Service)'

16 Mar 2021 timeline

b'Acronis' disclosed a bug submitted by b'bughunter98'
b'Unrestricted file upload vulnerability in IMCE'

16 Mar 2021 timeline

b'Acronis' disclosed a bug submitted by b'ashishmurugan'
b'ClickJacking'

16 Mar 2021 timeline

b'GitLab' disclosed a bug submitted by b'muthu_prakash'
b'Revoked User can still view the Merge Request created by him via API'

15 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'SQLI on uberpartner.eu leads to exposure of sensitive user data of Uber partners'

15 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'samux'
b'Reflected XSS on https://www.uber.com '

15 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Lack of CSRF protection on uberps.com makes every form vulnerable to CSRF'

15 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Access to SQL server of ubergreen.pt through password disclosure from different domain on same IP'

15 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Unsecured Dropwizard Admin Panel on display.uber-adsystem.com exposes sensitive server information'

15 Mar 2021 timeline

b'Twitter' disclosed a bug submitted by b'm7mdharoun'
b'2 Subdomains Takeover at readfu.com'

15 Mar 2021 timeline

b'Node.js' disclosed a bug submitted by b'omicronenergy'
b"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"

15 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'derision'
b'SQL Injection at https://lite.r-keeper.ru/site_api/localize/translate/rklscommon/ru'

14 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'moshakes'
b'Exposed Git Repo at https://mini-app.delivery-club.ru'

14 Mar 2021 timeline

1 ... 250 251 252 253 254 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.