The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'foobar7'
b'Gallery: No feedback for invalid password'

27 Jul 2019 timeline

b'Automattic' disclosed a bug submitted by b'yusuf_furkan'
b'No rate limit on app.crowdsignal.com (Finish quiz)'

27 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'gvde'
b"LDAP login possible even though account doesn't match user filter"

27 Jul 2019 timeline

b'Zendesk' disclosed a bug submitted by b'hariharan-s'
b'Stored XSS in Macro Editing - Introduced by Admins to affect Admins'

27 Jul 2019 timeline

b'WordPress' disclosed a bug submitted by b'wxy7174'
b'Stored XSS on byddypress Plug-in via groups name'

27 Jul 2019 timeline

b'Unikrn' disclosed a bug submitted by b'dr_akm'
b'Rate Limit workaround in the message of the phone number verification '

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'ctulhu'
b'Some HTML Tags are Getting Executed in com.nextcloud.client'

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'blackdex'
b'Able to bypass "Device credentials" Lock'

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'doragon'
b'Combination of content provider allows private data disclosure'

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'doragon'
b'Bypassing lock protection'

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'bluedangerforyou'
b'SQL Injection found in NextCloud Android App Content Provider'

26 Jul 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'volker_weissmann'
b'Extremly simple way to bypass Nextcloud-Client PIN/Fingerprint lock'

26 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'page1337'
b'Content spoofing ? http://my.mail.ru/cgi-bin/app/paymentm'

25 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'xalerafera'
b'XSS in messages on geekbrains.ru'

24 Jul 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lightangel1412'
b'[http-file-server] Stored XSS in the filename when directories listing'

24 Jul 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'lightangel1412'
b'[min-http-server] Stored XSS in the filename when directories listing'

24 Jul 2019 timeline

b'VLC (European Commission - DIG' disclosed a bug submitted by b'biewuxz'
b'Access Violation Reading in libfaad_plugin'

24 Jul 2019 timeline

b'VLC (European Commission - DIG' disclosed a bug submitted by b'biewuxz'
b'Access Violation Reading EXPLOITABLE_0228'

24 Jul 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'nstikhomirov'
b'[authdl.mail.ru] Spoofing IP address'

23 Jul 2019 timeline

b'ok.ru' disclosed a bug submitted by b'iframe'
b'Privilege Escalation ??????? ??? ????????? ?????? ? okl.lt'

23 Jul 2019 timeline

1 ... 419 420 421 422 423 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.