The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Code reversion allowing SQLI again in ???????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b"PII leakage due to caching of Order/Contract ID's on ?????????"

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'modam3r5'
b'sql injection on /messagecenter/messagingcenter at https://www.???????/'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'manshum12'
b'???????? SQL'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0_1vitthal'
b'SQL Injection on www.?????????? on countID parameter'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi'
b'SSRF on ????????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thermaltpp'
b'Admin panel take over | User info leakage | Mass Comprimise'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong'
b'https://???????? Impacted by DNN ImageHandler SSRF'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'albinowax'
b'Request smuggling on ????????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps'
b'Online training material disclosing username and password'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ruffdraft'
b'2 vulnerabilities of arbitrary code in ???????? - CVE-2017-5929'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Open FTP server on a DoD system'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Remote OS command Execution in the 3 more Oracle Weblogic on the ????????, ????, ??????? [CVE-2017-10352]'

08 Oct 2019 timeline

b'Shopify' disclosed a bug submitted by b'clew'
b'StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts'

07 Oct 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'0xche'
b'Path traversal using symlink'

07 Oct 2019 timeline

b'GitLab' disclosed a bug submitted by b'ashish_r_padelkar'
b'Know whether private project name exists or not within a group using link comments'

07 Oct 2019 timeline

b'Liberapay' disclosed a bug submitted by b'rajauzairabdullah'
b'Full Path disclosure on 500 error'

05 Oct 2019 timeline

b'LibSass' disclosed a bug submitted by b'geeknik'
b'heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92'

05 Oct 2019 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'Signed integer overflow in tool_progress_cb()'

04 Oct 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'mada_uk'
b'Trojan:JS/CoinMiner in npm files'

04 Oct 2019 timeline

1 ... 406 407 408 409 410 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.