The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Publicly accessible Order confirmations leaking User Emails on ???'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'SSRF on ????????? Allowing internal server data access'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf'
b'Remote Code Execution (RCE) in a DoD website'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf'
b'Remote Code Execution (RCE) in a DoD website'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf'
b'Remote Code Execution (RCE) in a DoD website'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Code reversion allowing SQLI again in ???????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b"PII leakage due to caching of Order/Contract ID's on ?????????"

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'modam3r5'
b'sql injection on /messagecenter/messagingcenter at https://www.???????/'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'manshum12'
b'???????? SQL'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0_1vitthal'
b'SQL Injection on www.?????????? on countID parameter'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi'
b'SSRF on ????????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thermaltpp'
b'Admin panel take over | User info leakage | Mass Comprimise'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong'
b'https://???????? Impacted by DNN ImageHandler SSRF'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'albinowax'
b'Request smuggling on ????????'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps'
b'Online training material disclosing username and password'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ruffdraft'
b'2 vulnerabilities of arbitrary code in ???????? - CVE-2017-5929'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera'
b'Open FTP server on a DoD system'

08 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'Remote OS command Execution in the 3 more Oracle Weblogic on the ????????, ????, ??????? [CVE-2017-10352]'

08 Oct 2019 timeline

b'Shopify' disclosed a bug submitted by b'clew'
b'StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts'

07 Oct 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'0xche'
b'Path traversal using symlink'

07 Oct 2019 timeline

1 ... 407 408 409 410 411 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.