The unofficial HackerOne disclosure Timeline

b'Dust' disclosed a bug submitted by b'qatada'
b'UI flaw allows unauthorized users to add documents to restricted folders'

23 Apr 2025 timeline

b'Dust' disclosed a bug submitted by b'mous_haxk'
b'Unauthorized Table Creation by Member'

23 Apr 2025 timeline

b'Monero' disclosed a bug submitted by b'boog900'
b'Transactions in invalid blocks are kept in tx-pool without undergoing certain checks.'

23 Apr 2025 timeline

b'Monero' disclosed a bug submitted by b'boog900'
b'A peer can remotely fill the pending block queue to an extremely high size, with blocks that will never leave the queue.'

23 Apr 2025 timeline

b'Monero' disclosed a bug submitted by b'sagewilder2022'
b'Remote memory exhaustion in Epee RPC stack under zero Receive Window'

23 Apr 2025 timeline

b'Monero' disclosed a bug submitted by b'asurar0'
b'Spamming highly nested JSON RPC requests cause node to disconnect from p2p network'

23 Apr 2025 timeline

b'PlayStation' disclosed a bug submitted by b'theflow0'
b'sys_fsc2h_ctrl kernel stack free'

18 Apr 2025 timeline

b'Autodesk' disclosed a bug submitted by b'ahmednasr1'
b'Reflected XSS Vulnerability in SVG File at area-resources-stg.autodesk.com'

17 Apr 2025 timeline

b'WakaTime' disclosed a bug submitted by b'0x_matrix'
b'Leaked credentials ( emails and passwords , etc...)'

16 Apr 2025 timeline

b'Shopify' disclosed a bug submitted by b'raymond_lind'
b'Reflected XSS In Marketing Reports Page On *.myshopify.com/admin'

15 Apr 2025 timeline

b'Monero' disclosed a bug submitted by b'padillac'
b'low-level p2p ping + tcp flooding leads to a remote crash in monerod'

14 Apr 2025 timeline

b'WakaTime' disclosed a bug submitted by b'parthabishwas'
b'Login Information and Credentials Have Been Leaked on wakatime.com'

13 Apr 2025 timeline

b'1Password - Enterprise Password Manager' disclosed a bug submitted by b'stomper4'
b'#**CSV Injection in shared passwords leads to complete Private Vault Exfiltration**'

12 Apr 2025 timeline

b'Lichess' disclosed a bug submitted by b'ryomenshuvro'
b'Direct IP Access to Website'

11 Apr 2025 timeline

b'Ruby on Rails' disclosed a bug submitted by b'leonsirio'
b'1-Click Cross-Site Scripting via Custom Configuration in SafeListSanitizer'

09 Apr 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'(Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

08 Apr 2025 timeline

b'Autodesk' disclosed a bug submitted by b'0xsom3a'
b'HTML Injection in Business Name Parameter in Payapps'

07 Apr 2025 timeline

b'KHealth' disclosed a bug submitted by b'eneri'
b'Information disclouser from URL parameter "access" lead to Account Takeover'

07 Apr 2025 timeline

b'Adobe' disclosed a bug submitted by b'jf0x0r'
b'Disclosure of git metadata and springboot actuator information'

07 Apr 2025 timeline

b'HackerOne' disclosed a bug submitted by b'avinash_'
b'The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summary is present'

01 Apr 2025 timeline

1 ... 44 45 46 47 48 ... 777

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.