The unofficial HackerOne disclosure Timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'SSRF - Image Sources in HTML Snippets - 727234 bypass'

20 Feb 2020 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'Unchecked URL in attachment datasource'

20 Feb 2020 timeline

b'Open-Xchange' disclosed a bug submitted by b'zhutyra'
b'SSRF - URL Attachments - 725307 bypass'

20 Feb 2020 timeline

b'Nextcloud' disclosed a bug submitted by b'mayankraheja069'
b'Email Spoofing'

20 Feb 2020 timeline

b'Valve' disclosed a bug submitted by b'xpaw'
b'GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGame'

19 Feb 2020 timeline

b'WakaTime' disclosed a bug submitted by b'phhitachi'
b'Broken Authentication and session management OWASP A2'

19 Feb 2020 timeline

b'Stripo Inc' disclosed a bug submitted by b'pain45'
b'SSRF & unrestricted file upload on https://my.stripo.email/'

19 Feb 2020 timeline

b'Valve' disclosed a bug submitted by b'hackerontwowheels'
b'Steam chat - trade offer presentation vulnerability'

19 Feb 2020 timeline

b'Razer' disclosed a bug submitted by b'fpatrik'
b'Reflected XSS in eform.molpay.com'

18 Feb 2020 timeline

b'Razer' disclosed a bug submitted by b'0xpegg'
b'Admin Management - Login Using Default Password - Leads to Image Upload Backdoor/Shell'

18 Feb 2020 timeline

b'Razer' disclosed a bug submitted by b'iamsahana'
b'Payment PIN Verification Bypass'

18 Feb 2020 timeline

b'Razer' disclosed a bug submitted by b'corraldev'
b'[pay.gold.razer.com] Stored XSS - Order payment'

18 Feb 2020 timeline

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'h4x0rm4n'
b'DoS of https://blog.makerdao.com/ via CVE-2018-6389'

18 Feb 2020 timeline

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'h4x0rm4n'
b'xmlrpc.php FILE IS enable it will used for Bruteforce attack '

18 Feb 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b's_p_q_r'
b'[reveal.js] XSS by calling arbitrary method via postMessage'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'johndoe1492'
b'JMX RMI command injection on 195.211.131.82(Mail.ru Gaming)'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'orlserg'
b'Race condition ?? ??????? ?????? ?? ?????'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'bounty-'
b'Open Redirect'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'renekroka'
b'Reflected XSS with WAF Bypass https://pw.mail.ru'

18 Feb 2020 timeline

b'Automattic' disclosed a bug submitted by b'adhamsadaqah'
b'Stored XSS in wordpress.com'

17 Feb 2020 timeline

1 ... 360 361 362 363 364 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.