The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://???'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl'
b'[CVE-2019-11510 ] Path Traversal on ???????? leads to leaked passwords, RCE, etc'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Pulse Secure File disclosure, clear text and potential RCE'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[?????] Reflected GET XSS (/personnel.php?...&rcnum=*) with mouse action'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[????????] Boolean SQL Injection (/personnel.php?content=profile&rcnum=*)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[??????] Reflected GET XSS (/personnel.php?..&folder=*) with mouse action'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[???????] Reflected GET XSS (/mission.php?...&missionDate=*)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'?????????? bruteforceable RIC Codes allowing information on contracts '

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Email PII disclosure due to Insecure Password Reset field'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[????????] Reflected XSS'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[?????] Get all tickets (IDOR)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7'
b'[???] SQL injection & Reflected XSS'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'd0nut'
b'XSS on www.?????? alerts and a number of other pages'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b't-pwn'
b'Server-Side Request Forgery (SSRF)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'yumi'
b'????? - DOM-based XSS'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'yumi'
b'????? - DOM-based XSS'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Partial PII leakage due to public set gitlab'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Corda Server XSS ????????'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tampe125'
b'LDAP Injection at ??????'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'SSRF vulnerability on ?????????? leaks internal IP and various sensitive information'

02 Dec 2019 timeline

1 ... 382 383 384 385 386 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.