The unofficial HackerOne disclosure Timeline

b'New Relic' disclosed a bug submitted by b'jon_bottarini'
b'Stored XSS via "my recent queries" selector in NRQL dashboard builder'

24 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'harshita174'
b'No Valid SPF Records'

24 Aug 2020 timeline

b'Open-Xchange' disclosed a bug submitted by b'catenacyber'
b'Null dereference in mcht_relational_validate ext-relational-common.c:136'

24 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'cyc0rpion'
b'User registration using public domain email like gmail in place of professional email.'

24 Aug 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b"Pentester can obtain information about other pentesters who applied for the same test, but weren't accepted"

24 Aug 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[cloudron-surfer] Denial of Service via LDAP Injection'

22 Aug 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[meemo-app] Denial of Service via LDAP Injection'

22 Aug 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[extra-asciinema] Command Injection via insecure command formatting'

22 Aug 2020 timeline

b'Yelp' disclosed a bug submitted by b'hk755a'
b'CRITICAL-CLICKJACKING at Yelp Reservations Resulting in exposure of victim Private Data (Email info) + Victim Credit Card MissUse. '

21 Aug 2020 timeline

b'Yelp' disclosed a bug submitted by b'hk755a'
b'ClickJacking on IMPORTANT Functions of Yelp'

21 Aug 2020 timeline

b'Yelp' disclosed a bug submitted by b'hk755a'
b'Unauthorized Use of Victim Credit Card'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'vbdev'
b'Django debug enabled showing information about system, database, configuration files.'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'higbee'
b'Django should not have debug mode enabled'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'exploit_db'
b'Sensitive Information Disclosure'

21 Aug 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'awarau'
b'Prototype Pollution lodash 4.17.15'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'aungkyawphyo'
b'Django DEBUG mode enabled and leaked system information.'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'try___for_impossible'
b'Information Disclosure through DEBUG at Subscription [https://app.dropcontact.io/app/subscription?connector=salesforce](CRITICAL)'

21 Aug 2020 timeline

b'Dropcontact' disclosed a bug submitted by b'elmahdi'
b'Registering with email [ +70 Chars ] Lead to Disclose some informations [Django Debug Mode ]'

21 Aug 2020 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'Java: CWE-522 Insecure basic authentication'

20 Aug 2020 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[javascript] CWE-117: CodeQL query to detect Log Injection'

20 Aug 2020 timeline

1 ... 303 304 305 306 307 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.