The unofficial HackerOne disclosure Timeline

b'Node.js third-party modules' disclosed a bug submitted by b's_p_q_r'
b'[reveal.js] XSS by calling arbitrary method via postMessage'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'johndoe1492'
b'JMX RMI command injection on 195.211.131.82(Mail.ru Gaming)'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'orlserg'
b'Race condition ?? ??????? ?????? ?? ?????'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'bounty-'
b'Open Redirect'

18 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'renekroka'
b'Reflected XSS with WAF Bypass https://pw.mail.ru'

18 Feb 2020 timeline

b'Automattic' disclosed a bug submitted by b'adhamsadaqah'
b'Stored XSS in wordpress.com'

17 Feb 2020 timeline

b'NordVPN' disclosed a bug submitted by b'zerody'
b'Potential leak of server side software at repogohi.nordvpn.com'

16 Feb 2020 timeline

b'SEMrush' disclosed a bug submitted by b'a_d_a_m'
b'CORS misconfiguration which leads to the disclosure of certain data concerning the user.'

15 Feb 2020 timeline

15 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'rainbow_json'
b"[API] ICQ user's avatar can be manipulated remotely"

14 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'rainbow_json'
b'[Web ICQ Client] XSS ?????????? ? ????? ????????????'

14 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'rainbow_json'
b'[Web ICQ Client] XSS-inj in polls'

14 Feb 2020 timeline

b'Mail.ru' disclosed a bug submitted by b'rainbow_json'
b'IP address can be leaked on Image preview in ICQ for Android chat'

14 Feb 2020 timeline

b'Maximum' disclosed a bug submitted by b'rhetoric'
b"'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning"

14 Feb 2020 timeline

b'Slack' disclosed a bug submitted by b'akaki'
b'URL filter bypass in Enterprise Grid'

14 Feb 2020 timeline

b'Node.js' disclosed a bug submitted by b'mpracucci'
b'Fix for CVE-2018-12122 can be bypassed via keep-alive requests'

13 Feb 2020 timeline

b'Node.js' disclosed a bug submitted by b'jzebor'
b'Pull Request #12949 - Security Implications without CVE assignment'

13 Feb 2020 timeline

b'Node.js' disclosed a bug submitted by b'jzebor'
b'Out of order TLS handshake / application data messages lead to segmentation fault'

13 Feb 2020 timeline

b'Node.js' disclosed a bug submitted by b'jasnell'
b'Denial of Service: nghttp2 use of uninitialized pointer'

13 Feb 2020 timeline

b'Node.js' disclosed a bug submitted by b'jzebor'
b'HTTP/2 Denial of Service Vulnerability'

13 Feb 2020 timeline

1 ... 363 364 365 366 367 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.