The unofficial HackerOne disclosure Timeline

b'Stripo Inc' disclosed a bug submitted by b'savxiety'
b'Bypass of #1047119: Missing Rate Limit while creating Plug-Ins at https://my.stripo.email/cabinet/plugins/'

13 Jan 2021 timeline

b'h1-ctf' disclosed a bug submitted by b'rekter0'
b'ctf walkthrough'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'val_brux'
b'SQL Injection in www.'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'savxiety'
b'PII Information Leak at https://.mil/'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Authentication bypass and RCE on the https:// due to exposed Cisco TelePresence SX80 with default credentials'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Directory Indexing on the (https:///) leads to the backups disclosure and credentials leak'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Local File Disclosure on the (https:///) leads to the source code disclosure & DB credentials leak'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pi_hunter50'
b'System Error Reveals Sensitive SQL Call Data'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'khizer47'
b'Apache solr RCE via velocity template'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast'
b'Sensitive data exposure via https:///secure/QueryComponent!Default.jspa - CVE-2020-14179'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast'
b'Sensitive data exposure via https:///secure/QueryComponent!Default.jspa - CVE-2020-14179'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r0p0'
b'SSRF in login page using fetch API exposes victims IP address to attacker controled server'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'POST based RXSS on https:// via frm_email parameter'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirateducky'
b'Able to log in with default g creds at https.mil '

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast'
b'PHP info page disclosure'

12 Jan 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'Able to authenticate as administrator by navigating to https:///admin/'

12 Jan 2021 timeline

b'h1-ctf' disclosed a bug submitted by b'holme'
b'Solution for hackyholiday'

12 Jan 2021 timeline

b'PlayStation' disclosed a bug submitted by b'theflow0'
b'SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECK'

12 Jan 2021 timeline

b'h1-ctf' disclosed a bug submitted by b'yashrs'
b'Flags for hackyholidays CTF'

12 Jan 2021 timeline

b'h1-ctf' disclosed a bug submitted by b'thezoomer'
b"It's just a man on a mission"

12 Jan 2021 timeline

1 ... 261 262 263 264 265 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.