The unofficial HackerOne disclosure Timeline

b'X (Formerly Twitter)' disclosed a bug submitted by b'bugra'
b'Able to see Twitter Circle tweets due to improper access control on the "FavoriteTweet" endpoint'

01 Mar 2024 timeline

b'IBM' disclosed a bug submitted by b'nightm4re'
b'XSS Refelected on jazz.net'

29 Feb 2024 timeline

b'IBM' disclosed a bug submitted by b'nepalihacker0x01'
b'Improper Authentication on Alertmanager instance'

29 Feb 2024 timeline

b'IBM' disclosed a bug submitted by b'bugoverflow'
b'Jenkins server access due to weak password'

29 Feb 2024 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'vx01'
b'Command Injection using malicious hostname in expanded proxycommand'

28 Feb 2024 timeline

b'LinkedIn' disclosed a bug submitted by b'domg'
b'Stored XSS on LinkedIn App via iframe tag in Article'

28 Feb 2024 timeline

b'Daimler Truck' disclosed a bug submitted by b'7absec'
b'Server-based source code disclosures'

28 Feb 2024 timeline

b'Daimler Truck' disclosed a bug submitted by b'7absec'
b'Time-based SQL Injection'

28 Feb 2024 timeline

b'JetBlue' disclosed a bug submitted by b'asce21'
b'Sensitive information disclosure on grafana'

26 Feb 2024 timeline

b'Automattic' disclosed a bug submitted by b'renniepak'
b'DOM XSS on multiple Automattic domains through postMessages'

26 Feb 2024 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'priyanshusharma9789'
b'CSP Bypass and escalation of https://hackerone.com/reports/2279346'

23 Feb 2024 timeline

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ryotak'
b'Arbitrary file read from Cloudflare Pages build environment'

23 Feb 2024 timeline

b'X (Formerly Twitter)' disclosed a bug submitted by b'alp'
b'Ability to getting Twitter Blue verified badge without purchase it'

22 Feb 2024 timeline

b'TikTok' disclosed a bug submitted by b'a77w3'
b'HTML Injection on TikTok Ads'

20 Feb 2024 timeline

b'Mars' disclosed a bug submitted by b'xplo1t'
b'Unrestricted File Upload at '

19 Feb 2024 timeline

b'LinkedIn' disclosed a bug submitted by b'mv0x01'
b'Employee-only Area Bypass'

19 Feb 2024 timeline

b'inDrive' disclosed a bug submitted by b'bugsv2'
b'# Drivers can access the customers phone number, current location without getting their offer accepted!'

19 Feb 2024 timeline

b'inDrive' disclosed a bug submitted by b'bugsv2'
b"Disclosure of users' ip address whenever they view my fright offer on image preview (Without interaction)"

19 Feb 2024 timeline

b'PortSwigger Web Security' disclosed a bug submitted by b'joaxcar'
b'CSP bypass on PortSwigger.net using Google script resources'

18 Feb 2024 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'OAuth2 "authorization_code" is valid indefinetly'

17 Feb 2024 timeline

1 ... 35 36 37 38 39 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.