The unofficial HackerOne disclosure Timeline

b'TikTok' disclosed a bug submitted by b'luizviana'
b'Bypass SMS verification to delete TikTok account'

23 Dec 2020 timeline

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q'
b'Open Redirect (6.0.0 < rails < 6.0.3.2)'

22 Dec 2020 timeline

b'WHO COVID-19 Mobile App' disclosed a bug submitted by b'hackbhavin'
b'DMARC and SPF records'

22 Dec 2020 timeline

22 Dec 2020 timeline

b'pixiv' disclosed a bug submitted by b'zimmer75'
b'Open Redirect at https://oauth.secure.pixiv.net'

22 Dec 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'daniyal_nasir'
b'Data URI Stored XSS on Donations Page'

22 Dec 2020 timeline

b'TikTok' disclosed a bug submitted by b'luizviana'
b'Multiple Cross-Site Scripting vulnerability via the language parameter'

21 Dec 2020 timeline

b'WHO COVID-19 Mobile App' disclosed a bug submitted by b'd0nut'
b'Probably unexploitable XSS via Header Injection'

21 Dec 2020 timeline

b'Stripo Inc' disclosed a bug submitted by b'exploit_db'
b'Permanent DOS for new users!'

21 Dec 2020 timeline

b'phpBB' disclosed a bug submitted by b'they'
b"Server Side Request Forgery in 'Jabber settings' in Admin Control Panel"

20 Dec 2020 timeline

b'CS Money' disclosed a bug submitted by b'libneko'
b' / , steamid'

20 Dec 2020 timeline

b'Snapchat' disclosed a bug submitted by b'drrichardmatthews'
b'CreatorID leaked from public content posted to SnapMaps'

18 Dec 2020 timeline

b'TikTok' disclosed a bug submitted by b'gnux'
b'User Able to Reopen a Ticket by Modify the Request'

18 Dec 2020 timeline

b'TikTok' disclosed a bug submitted by b'sniper302'
b'User In The Same Center Can Create CSRF To Change The Information About Business'

18 Dec 2020 timeline

b'Nintendo' disclosed a bug submitted by b'mrnbayoh'
b'[3DS][SSL][SDK] Unchecked number of audio channels in Mobiclip SDK leads to RCE in eShop movie player'

18 Dec 2020 timeline

b'Nintendo' disclosed a bug submitted by b'mrnbayoh'
b'[3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player'

18 Dec 2020 timeline

b'Nintendo' disclosed a bug submitted by b'mrnbayoh'
b'[3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacks'

18 Dec 2020 timeline

b'MariaDB' disclosed a bug submitted by b'gabriel_sztejnworcel'
b'Named pipe connection inteception'

17 Dec 2020 timeline

b'TikTok' disclosed a bug submitted by b'chihuahua'
b'Blind SSRF in ads.tiktok.com'

17 Dec 2020 timeline

b'Basecamp' disclosed a bug submitted by b'demonia'
b'Bypass Tracking Blocker Protection Using Slashes Without Protocol On The Image Source.'

17 Dec 2020 timeline

1 ... 273 274 275 276 277 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.