The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (..mil)'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[HTAF4-213] [Pre-submission] Unsafe AMF deserialization (CVE-2017-5641) in Apache Flex BlazeDS at the https://www./daip/messagebroker/amf'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https://'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (.mil)'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian'
b'Out-Of-Bounds Memory Read on '

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ezequielpuig'
b'Subdomain Takeover via Host Header Injection on www.'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[HTAF4-213] [Pre-submission] XSS via arbitrary cookie name at the https://www2./nssi/core/dot_stu_reg/Registration.aspx'

18 Jun 2024 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'adam_wallwork'
b'CVE-2021-39226 Discovered on endpoint https:///api/snapshots'

18 Jun 2024 timeline

b'curl' disclosed a bug submitted by b'splitline'
b'Unicode-to-ASCII conversion on Windows can lead to argument injection and more'

18 Jun 2024 timeline

b'curl' disclosed a bug submitted by b'z3r0yu'
b'Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities'

18 Jun 2024 timeline

b'curl' disclosed a bug submitted by b'stux3net08'
b'Denial of Service in curl Request - HTTP headers eat all memory'

18 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'mohs3n'
b'see card comments after remove shared board'

18 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'akashhamal0x01'
b'Access Control Vulnerability Enabling Unauthorized Access to Limited Disclosure Reports'

17 Jun 2024 timeline

b'Mozilla' disclosed a bug submitted by b'erdy'
b'Account deletion using the /v1/account/destroy API endpoint using account password without 2FA verification'

17 Jun 2024 timeline

b'Drugs.com' disclosed a bug submitted by b'akhan8041'
b'Email OTP/2FA Bypass'

16 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'section1'
b'Events information leaked with shared calendars on recurrence exceptions'

14 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'7h3b4dg3r'
b'Read-only users can restore old versions'

14 Jun 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'lourcode'
b'Code injection in Nextcloud Desktop Client for macOS'

14 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'nagli'
b'[Spot Check] - Ability to disclose metadata about Spot Checks (Number of Hackers + Hackers Criteria) via "SpotCheckSingleQuery"'

11 Jun 2024 timeline

b'HackerOne' disclosed a bug submitted by b'youstin'
b"[ Spot Check ] Team members can edit a user's write-up"

06 Jun 2024 timeline

1 ... 31 32 33 34 35 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.