The unofficial HackerOne disclosure Timeline

b'Open-Xchange' disclosed a bug submitted by b'rumata'
b'A specially crafted message sent to the local delivery agent (LMTP) causes the LMTP child process to issue a panic (call i_panic)'

05 Jan 2021 timeline

b'Stripo Inc' disclosed a bug submitted by b'ofjaaaah'
b'No rate limiting - Create data'

05 Jan 2021 timeline

b'Stripo Inc' disclosed a bug submitted by b'ofjaaaah'
b'No rate limiting - Create Plug-ins'

05 Jan 2021 timeline

b'Node.js' disclosed a bug submitted by b'fwilhelm'
b'Node.js: use-after-free in TLSWrap'

05 Jan 2021 timeline

b'Doppler' disclosed a bug submitted by b'ibrahimauwal'
b'email spoofing on doppler.team'

04 Jan 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'catenacyber'
b'Incomplete fix for CVE-2020-12673 : Specially crafted NTML message leads to buffer over read'

04 Jan 2021 timeline

b'Open-Xchange' disclosed a bug submitted by b'catenacyber'
b'Buffer overread off by one in `rpa_read_buffer`, incomplete fix for CVE-2020-12674'

04 Jan 2021 timeline

b'Twitter' disclosed a bug submitted by b'ryotak'
b'Read-only application can publish/delete fleets'

04 Jan 2021 timeline

b'New Relic' disclosed a bug submitted by b'batuhan'
b'Sending thousands of notifications with single request'

04 Jan 2021 timeline

b'ImpressCMS' disclosed a bug submitted by b'ex1st4nc3_'
b'Other misconfiguration on Slack Server'

04 Jan 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'susant_wagle123'
b'Hyper Link Injection while signup '

03 Jan 2021 timeline

b'Omise' disclosed a bug submitted by b'tw4v3sx'
b'bypassing MessageToSeller length limit at link.omise.co leads to the seller not been able to check any transaction details , refund or open a dispute.'

02 Jan 2021 timeline

b'curl' disclosed a bug submitted by b'cjun'
b'Integer overflows in tool_operate.c at line 1541'

01 Jan 2021 timeline

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer'
b'XSS leads to RCE on the RocketChat desktop client.'

01 Jan 2021 timeline

b'Automattic' disclosed a bug submitted by b'fuzzme'
b'[intensedebate.com] SQL Injection Time Based on /changeReplaceOpt.php'

01 Jan 2021 timeline

b'Automattic' disclosed a bug submitted by b'fuzzme'
b'[intensedebate.com] SQL Injection Time Based On /js/commentAction/'

01 Jan 2021 timeline

b'Automattic' disclosed a bug submitted by b'fuzzme'
b'SQL Injection Union Based'

01 Jan 2021 timeline

b'TikTok' disclosed a bug submitted by b'gnux'
b'HTML Injection on Company Name on Email'

31 Dec 2020 timeline

b'TikTok' disclosed a bug submitted by b'sniper302'
b'CORS bypass on TikTok Ads Endpoint'

31 Dec 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'fatal0'
b'Mail.ru for Android - Theft of sensitive data'

31 Dec 2020 timeline

1 ... 273 274 275 276 277 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.