The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Dashboard sharing enables code injection into emails'

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Arbitrary file upload and stored XSS via support request'

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Support incident can be opened for any user via / and PII leak via field'

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Knowledge Base Articles are Globally Modifiable via '

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Second Order XSS via '

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Improper Access Controls Allow PII Leak via '

18 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mad_phoenix'
b'CVE 2020 14179 on jira instance '

18 Feb 2021 timeline

b'Rockstar Games' disclosed a bug submitted by b'bugstar'
b'Open redirect on https://signin.rockstargames.com/connect/authorize/rsg'

18 Feb 2021 timeline

b'Algolia' disclosed a bug submitted by b'exploit_db'
b'email verification bypass'

18 Feb 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'ar-arvind'
b'Google API Key is not restricted for specific application package name and signature [Mail.ru Cloud for Android]'

18 Feb 2021 timeline

b'Clario' disclosed a bug submitted by b'akash-labade'
b'No rate Limit on Licenses Activation '

18 Feb 2021 timeline

b'Zomato' disclosed a bug submitted by b'prateek_0490'
b'[www.zomato.com] Leaking PIIs (All Email Addresses) Of All Zomato Users'

18 Feb 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'luchua'
b'[Java] CWE-522: Insecure LDAP authentication '

17 Feb 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'zelibob'
b'[golang] Division by zero query'

17 Feb 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[JavaScript]: add query for Express-HBS LFR'

17 Feb 2021 timeline

b'Automattic' disclosed a bug submitted by b'ucuping'
b'Stored XSS in wordpress.com'

17 Feb 2021 timeline

b'Automattic' disclosed a bug submitted by b'h_-_cker'
b'Non-changing "_idnonce" value leads to CSRF on accounts at https://intensedebate.com for account takeover'

17 Feb 2021 timeline

b'QIWI' disclosed a bug submitted by b'timyun'
b'PIN OK attack'

17 Feb 2021 timeline

b'Acronis' disclosed a bug submitted by b'savik'
b'CVE-2020-6287 https://redapi2.acronis.com'

16 Feb 2021 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'Server-side template injection at ujs test server'

16 Feb 2021 timeline

1 ... 258 259 260 261 262 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.