The unofficial HackerOne disclosure Timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'Query to find TLS configurations supporting hardcoded insecure versions of the protocol and cipher suites'

03 Sep 2020 timeline

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd'
b'[CATENACYBER]: [CPP] CWE-476 Null Pointer Dereference : Another query to either missing or redundant NULL check'

03 Sep 2020 timeline

b'Dropbox' disclosed a bug submitted by b'tesitura'
b'Local Privilege Escalation on Dropbox Desktop for Windows'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x'
b'Subdomain takeover due to an unclaimed Amazon S3 bucket on ???'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'e3xpl0it'
b'?ode injection host ?????????'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hzllaga'
b'Remote Code Execution on ?????????'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'secret_letters'
b'??? is vulnerable to CVE-2020-3452 Read-Only Path Traversal Vulnerability'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'professor1'
b'CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rudra_2000'
b'Elmah.axd is publicly accessible and leaking Error Log for ROOT on ?????_PRD_WEB1 ?????????elmah.axd'

03 Sep 2020 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli'
b'Reflected XSS on ???????'

03 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'yukusawa18'
b'REFLECTED XSS On http://jsgames.mail.ru/bad_browser.php via back_url paramter'

03 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b'SQL injection at fleet.city-mobil.ru'

03 Sep 2020 timeline

b'Equifax' disclosed a bug submitted by b'aksquare'
b'Open SonarQube instance leaking internal source code'

03 Sep 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lightangel1412'
b'[static-server-gx] Path Traversal allowing to read any files on the server'

03 Sep 2020 timeline

b'Yelp' disclosed a bug submitted by b'cocoh__23'
b'IDOR in locid parameter allowing to view others accounts Profile Locations '

02 Sep 2020 timeline

b'Twitter' disclosed a bug submitted by b'cyanpiny'
b'Denial of Service | twitter.com & mobile.twitter.com'

02 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'steal_wart'
b'Subdomain Takeover at analyticstest.geekbrains.ru'

02 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'iframe'
b'[api.33slona.ru] ?????? ? API ?? ?? ???????????? ???????????? ??????? 302 ???????.'

02 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'iframe'
b'looch.tv CORS crossite user information and stream_key access'

02 Sep 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'avolume'
b'Public access to Sidekiq dashboard at shopper.sbermarket.ru'

02 Sep 2020 timeline

1 ... 305 306 307 308 309 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.