The unofficial HackerOne disclosure Timeline

b'Clario' disclosed a bug submitted by b'dilawer01'
b'Reflected xss on mackeeper.com'

17 May 2020 timeline

b'Clario' disclosed a bug submitted by b'dilawer01'
b'open redirect at https://account.mackeeper.com/auth/signin/continue via improper uri sanitization'

17 May 2020 timeline

b'MTN Group' disclosed a bug submitted by b'miguel_santareno'
b'SharePoint exposed web services in a subdomain'

16 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'p4fg'
b'404-response contains debug-information with all headers'

16 May 2020 timeline

b'ok.ru' disclosed a bug submitted by b'iframe'
b'?????????? CSRF ????? ?? ??????? ???????? ???????.'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'amans'
b'Subdomain takeover of resources.hackerone.com'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Customer private program can disclose email any users through invited via username'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Changes to data in a CVE request after draft via GraphQL query'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Rounding errors on rewarding a bounty leads to bypassing the 20% H1 commission fee'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'A team member of the program with Report rights can ban the Admin'

15 May 2020 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Mismatch between frontend and backend validation via `ban_researcher` leads to H1 support and hackers email spam'

15 May 2020 timeline

b'GitLab' disclosed a bug submitted by b'gregxsunday'
b'No redirect_uri in the db for web-internal clientKey leads to one-click DoS on gitter.im'

15 May 2020 timeline

b'Phabricator' disclosed a bug submitted by b'codeprivate'
b'SSRF in notifications.server configuration'

15 May 2020 timeline

b'Visma Public' disclosed a bug submitted by b'base_64'
b'Read-only user can access payroll information without having access to payroll.'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'rumiljonov'
b'Bypass front server restrictions and access to forbidden files and directories through X-Rewrite-Url/X-original-url header on account.mackeeper.com'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'm_4_l_l_0_k'
b'CSS Injection on static.mackeeper.com - Potential XSS'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'm_4_l_l_0_k'
b'IDOR at https://account.mackeeper.com/at/load-reports/profile/<profile_id> leaks information about devices/licenses'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'karna__'
b'No rate limiting on password reset page'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'karna__'
b'Account Takeover because of the mis-configuration on the Password Reset Page'

15 May 2020 timeline

b'Clario' disclosed a bug submitted by b'darkerhack'
b'Information disclosure of Internal php files on [mackeeper.com/blog/api/send-event]'

15 May 2020 timeline

1 ... 338 339 340 341 342 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.