The unofficial HackerOne disclosure Timeline

b'Stripo Inc' disclosed a bug submitted by b'splint3rsec'
b'No rate limit in email subscription'

11 Jan 2021 timeline

b'Bitwala' disclosed a bug submitted by b'zerodivisi0n'
b'GraphQL introspection query works through unauthenticated WebSocket'

09 Jan 2021 timeline

b'Khan Academy' disclosed a bug submitted by b'sh3rl0ck_'
b'Login page vulnerable to bruteforce attacks via rate limiting bypass'

09 Jan 2021 timeline

b'Doppler' disclosed a bug submitted by b'bugera'
b'Owner can change themself for another Role Mode but application doesnot have this function.'

09 Jan 2021 timeline

b'Doppler' disclosed a bug submitted by b'kirasys'
b'Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages'

09 Jan 2021 timeline

b'TikTok' disclosed a bug submitted by b'luizviana'
b'Open Redirect Vulnerability on TikTok Ads Portal '

09 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'jlleitschuh'
b'SSRF via maliciously crafted URL due to host confusion'

08 Jan 2021 timeline

b'GitLab' disclosed a bug submitted by b'mike12'
b'Stored XSS on the job page'

08 Jan 2021 timeline

b'VK.com' disclosed a bug submitted by b'dmzem'
b' - " " VK Pay. , .'

08 Jan 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b'Path Traversal iOS '

08 Jan 2021 timeline

b'VK.com' disclosed a bug submitted by b'manaenckov'
b'XSS '

08 Jan 2021 timeline

b'VK.com' disclosed a bug submitted by b's_p_q_r'
b'[m.vk.com] XSS /artist/ '

08 Jan 2021 timeline

b'VK.com' disclosed a bug submitted by b'executor'
b' /'

08 Jan 2021 timeline

b'pixiv' disclosed a bug submitted by b'fanar'
b'Bypass extension check leads to stored XSS at https://s2.booth.pm'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'creid'
b'Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time'

08 Jan 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer'
b'SAML authentication bypass through unauthenticated `addSamlProvider` Meteor Call'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'Heap Buffer Overflow (READ of size 1) in ourWriteOut'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'libcurl: SMTP end-of-response out-of-bounds read - CVE-2019-3823'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'tsedlmeyer'
b'curl still vulnerable to SMB access smuggling via FILE URL on Windows'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'major_tom'
b'Curl_auth_create_plain_message integer overflow leads to heap buffer overflow'

08 Jan 2021 timeline

1 ... 271 272 273 274 275 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.