The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'akaki'
b'HTML Injection on ????'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Open FTP on ???'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hassaan'
b'SQL injection found in US Navy Website (http://???/)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tomnomnom'
b'Video player on ??? allows arbitrary remote videos to be played'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jutsuce'
b'Remote File Inclusion, Malicious File Hosting, and Cross-site Scripting (XSS) in ????????'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'korprit'
b'Attackers can control which security questions they are presented (????????)'

02 Dec 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'linkks'
b' Out-of-date Version (Apache) '

02 Dec 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'ruvlol'
b'RCE on shared.mail.ru due to "widget" plugin'

02 Dec 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'r0hack'
b'Account Takeover at vseapteki.ru'

02 Dec 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'adr'
b'Unquoted Service Path in "Rockstar Game Library Service"'

02 Dec 2019 timeline

b'ok.ru' disclosed a bug submitted by b'circuit'
b'???????? XSS ? ?????? ?????????? ????? ?????'

02 Dec 2019 timeline

b'HackerOne' disclosed a bug submitted by b'msdian7'
b'Disclosure of `payment_transactions` for programs via GraphQL query'

01 Dec 2019 timeline

b'Vanilla' disclosed a bug submitted by b'ronr'
b'Web cache deception attack on https://open.vanillaforums.com/messages/all'

01 Dec 2019 timeline

b'Automattic' disclosed a bug submitted by b'hodkasia_sachin'
b'[IDOR] Attacker user can Approve/Decline AFK on the behalf of other users'

01 Dec 2019 timeline

b'Genasys Technologies' disclosed a bug submitted by b'roottusk'
b'Login Bypass to OTP Enumeration'

28 Nov 2019 timeline

b'Lob' disclosed a bug submitted by b'painreigns'
b'HTTP Request Smuggling on vpn.lob.com'

27 Nov 2019 timeline

b'GitLab' disclosed a bug submitted by b'jobert'
b'Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests'

27 Nov 2019 timeline

b'WakaTime' disclosed a bug submitted by b'rashedhasan007'
b'previous token can be reused for verifying same email address '

27 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'leonklingele'
b'Nextcloud domain and name of every user leaked to lookup server'

26 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'pisarenko'
b'????????? ?????????????? ?????????? composer.lock docker-compose.yml '

26 Nov 2019 timeline

1 ... 384 385 386 387 388 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.