The unofficial HackerOne disclosure Timeline

b'Kartpay' disclosed a bug submitted by b'bugera'
b'Duplicate Entry of email leads to 500 Server Error which disclosing the SQL Database table information'

14 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind'
b'MCS Graphite SSRF: internal network access'

13 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'darknight776'
b'Subdomain takeover http://promo.instamart.ru/'

13 Mar 2021 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[plain-object-merge] Prototype pollution'

13 Mar 2021 timeline

b'Dropbox' disclosed a bug submitted by b'prateek_0490'
b'Leaking API_KEY of testrail of HelloSign gives read/write access'

13 Mar 2021 timeline

b'Bumble' disclosed a bug submitted by b'ndrong'
b'Bumble API exposes read status of chat messages'

13 Mar 2021 timeline

b'Shopify' disclosed a bug submitted by b'francisbeaudoin'
b'Informations disclosure - Access to some checkout informations'

13 Mar 2021 timeline

b'Trint Ltd' disclosed a bug submitted by b'prophet'
b'Leak of Internal IP addresses'

12 Mar 2021 timeline

b'Liberapay' disclosed a bug submitted by b'sudipraj'
b'Failure to Invalid Session after Password Change'

12 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'secator'
b'[xss] content-type '

12 Mar 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'4lemon'
b'Customer domain information disclosure at https://biz.mail.ru/api/domains/*'

12 Mar 2021 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap'
b'[codeql-go]: Add query to find use of constant state parameter in Oauth2 flow'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j'
b'Java: Fix NashornScriptEngine detection in ScriptEngine query'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-312: Query to detect cleartext storage of sensitive information using Android SharedPreferences'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-598: Use of GET Request Method with Sensitive Query Strings'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme'
b'ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strlen.'

12 Mar 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-327: Add more broken crypto algorithms'

12 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast'
b'critical information disclosure'

11 Mar 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast'
b'critical information disclosure'

11 Mar 2021 timeline

1 ... 251 252 253 254 255 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.