The unofficial HackerOne disclosure Timeline

b'Greenhouse.io' disclosed a bug submitted by b'kartarkat'
b'Open S3 Bucket Accessible by any Aws User'

01 May 2020 timeline

b'MTN Group' disclosed a bug submitted by b'newbipath12'
b'Unsafe cors sharing of admin users '

30 Apr 2020 timeline

b'Uber' disclosed a bug submitted by b'redshark1802'
b'duplicate hsts headers lead to firefox ignoring hsts on business.uber.com'

30 Apr 2020 timeline

b'Uber' disclosed a bug submitted by b'healdb'
b'Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sg'

30 Apr 2020 timeline

b'SEMrush' disclosed a bug submitted by b'albatraoz'
b'IDOR in the https://market.semrush.com/'

30 Apr 2020 timeline

b'SEMrush' disclosed a bug submitted by b'a_d_a_m'
b'SSRF and LFI in site-audit tool'

30 Apr 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'organdonor'
b'Ability to find out the name of the database table and its columns'

30 Apr 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'root0x0'
b'Http Response Splitting on thumb.cloud.mail.ru'

30 Apr 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'wize'
b'CRLF Injection in 301 Redirect allow to Set-Cookies for mail.ru '

30 Apr 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'dedsec69'
b'Information Disclosure on {http://pro.tracker.my.com}'

30 Apr 2020 timeline

b'Razer' disclosed a bug submitted by b'zathu'
b'Insecure HostnameVerifier within WebView of Razer Pay Android (TLS Vulnerability)'

30 Apr 2020 timeline

b'Razer' disclosed a bug submitted by b'reemer'
b'SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLog'

30 Apr 2020 timeline

b'Razer' disclosed a bug submitted by b'sambal0x'
b'[Razer Pay Mobile App] IDOR within /v1_IM/friends/queryDrawRedLog allowed unauthorised access to read logs'

30 Apr 2020 timeline

b'Starbucks' disclosed a bug submitted by b'b4bilal'
b'Korea - LFI Server directory traversal at starbucks.co.kr'

30 Apr 2020 timeline

b'Razer' disclosed a bug submitted by b'sambal0x'
b"Improper Authorization at https://api-my.pay.razer.com/v1/trxDetail?trxId=[Id] allowing unauthorised access to other user's transaction details"

30 Apr 2020 timeline

b'Razer' disclosed a bug submitted by b'sambal0x'
b'[Razer Pay Android App] Multiple vulnerabilities chained to allow "RedPacket" money to be stolen by a 3rd party'

30 Apr 2020 timeline

b'Roblox' disclosed a bug submitted by b'albertl'
b'Malformed string sent through FireServer leads to server freezing/hanging'

29 Apr 2020 timeline

b'HackerOne' disclosed a bug submitted by b'bencode'
b'Read-only team members can read all properties of webhooks'

29 Apr 2020 timeline

b'concrete5' disclosed a bug submitted by b'sunny0day'
b'XSS in select attribute options'

29 Apr 2020 timeline

b'Zomato' disclosed a bug submitted by b'nikhar123'
b'Mathematical error found in meals for one'

29 Apr 2020 timeline

1 ... 347 348 349 350 351 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.