The unofficial HackerOne disclosure Timeline

b'GitLab' disclosed a bug submitted by b'vaib25vicky'
b'Able to leak private email of any user given his/her username via graphql'

08 Jan 2021 timeline

b'Courier' disclosed a bug submitted by b'bugera'
b'Rate limit function bypass can leads to occur huge critical problem into website. '

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'lersek-rh'
b'curl successfully matches IP address literal in URL against IP address literal in certificate Common Name'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'salvet'
b'Only OpenSSL handles a CRL when passed in via CApath '

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'd4d'
b'Abusing URL Parsers by long schema name'

08 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'bagder'
b'CVE-2020-8285: FTP wildcard stack overflow'

08 Jan 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'rhynorater'
b'Blind SSRF on velodrome.canary.k8s.io'

07 Jan 2021 timeline

b'Logitech' disclosed a bug submitted by b'hammodmt'
b'Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing'

07 Jan 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'jsafrane'
b'csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVC'

07 Jan 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'flag_c0'
b'exposed Git Repo at http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io/.git/'

07 Jan 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'flag_c0'
b'Unsecured Grafana instance on https://monitoring.prow-canary.k8s.io/dashboards'

07 Jan 2021 timeline

b'Kubernetes' disclosed a bug submitted by b'riramar'
b'Plaintext storage of a password on kubernetes release bucket'

07 Jan 2021 timeline

b'Node.js' disclosed a bug submitted by b'piao'
b'Potential HTTP Request Smuggling in nodejs'

07 Jan 2021 timeline

b'Mail.ru' disclosed a bug submitted by b'steal_wart'
b'Django Debug=True Leaks admin email addresss and serval system information '

07 Jan 2021 timeline

b'Doppler' disclosed a bug submitted by b'bugera'
b'No rate limit into email change leads to email notification boombing to its victim.'

06 Jan 2021 timeline

b'Doppler' disclosed a bug submitted by b'bugera'
b'Access page must be reloaded to perform multiple requests'

06 Jan 2021 timeline

b'Logitech' disclosed a bug submitted by b'c0nquer0r'
b'One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.com'

06 Jan 2021 timeline

b'Kartpay' disclosed a bug submitted by b'ph4n745m'
b'Being able to change account contents even after password change'

06 Jan 2021 timeline

b'Logitech' disclosed a bug submitted by b'optional'
b'Stored XSS on oslo.io in notifications via project name change'

05 Jan 2021 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[Java] CWE-555: Query to detect password in Java EE configuration files'

05 Jan 2021 timeline

1 ... 272 273 274 275 276 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.