The unofficial HackerOne disclosure Timeline

b'Mail.ru' disclosed a bug submitted by b'ruvlol'
b'RCE on shared.mail.ru due to "widget" plugin'

02 Dec 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b'Account Takeover at vseapteki.ru'

02 Dec 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'adr'
b'Unquoted Service Path in "Rockstar Game Library Service"'

02 Dec 2019 timeline

b'ok.ru' disclosed a bug submitted by b'circuit'
b'???????? XSS ? ?????? ?????????? ????? ?????'

02 Dec 2019 timeline

b'HackerOne' disclosed a bug submitted by b'msdian7'
b'Disclosure of `payment_transactions` for programs via GraphQL query'

01 Dec 2019 timeline

b'Vanilla' disclosed a bug submitted by b'ronr'
b'Web cache deception attack on https://open.vanillaforums.com/messages/all'

01 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'hodkasia_sachin'
b'[IDOR] Attacker user can Approve/Decline AFK on the behalf of other users'

01 Dec 2019 timeline

b'Genasys Technologies' disclosed a bug submitted by b'roottusk'
b'Login Bypass to OTP Enumeration'

28 Nov 2019 timeline

b'Lob' disclosed a bug submitted by b'painreigns'
b'HTTP Request Smuggling on vpn.lob.com'

27 Nov 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests'

27 Nov 2019 timeline

b'WakaTime' disclosed a bug submitted by b'rashedhasan007'
b'previous token can be reused for verifying same email address '

27 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'leonklingele'
b'Nextcloud domain and name of every user leaked to lookup server'

26 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'pisarenko'
b'????????? ?????????????? ?????????? composer.lock docker-compose.yml '

26 Nov 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'pss_xss'
b'Reflected XSS on https://go.mail.ru/search?fr=mn&q=<payload>'

25 Nov 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'almaco'
b'XSS via message subject - mobile application'

25 Nov 2019 timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b'Chrome extension: Websites can uninstall browser extensions'

25 Nov 2019 timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b'Override links for certificate warnings and similar UI are predictable'

25 Nov 2019 timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b"Kaspersky Password Manager allows websites to access user's address data"

24 Nov 2019 timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b"[Firefox and Chrome browser integration] Websites can hijack Kaspersky's command interface"

24 Nov 2019 timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b"[No browser integration] Websites can hijack Kaspersky's command interface"

24 Nov 2019 timeline

1 ... 380 381 382 383 384 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.