The unofficial HackerOne disclosure Timeline

Slack disclosed a bug submitted by hanno
Linux Desktop application slack executable does not use pie / no ASLR

17 Nov 2019 timeline

WordPress disclosed a bug submitted by irsdl
"Bad Protocols Validation" Bypass in "wp_kses_bad_protocol_once" using HTML-encoding without trailing semicolons

16 Nov 2019 timeline

Ruby disclosed a bug submitted by 358
WEBrick::HTTPAuth::DigestAuth authentication is vulnerable to regular expression denial of service (ReDoS)

15 Nov 2019 timeline

QIWI disclosed a bug submitted by circuit
?????-?? ???????? ??? ? ????? ????? http://shop.tochka.com

15 Nov 2019 timeline

Monero disclosed a bug submitted by ftramer
Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity

15 Nov 2019 timeline

Mail.ru disclosed a bug submitted by bobrov
[iot-hackathon.geekbrains.ru] Tilda Subdomain Takeover

15 Nov 2019 timeline

Mail.ru disclosed a bug submitted by r0hack
worki.ru: SMS code bruteforce

15 Nov 2019 timeline

Kartpay disclosed a bug submitted by hami
bypass captcha in the form forgot password

14 Nov 2019 timeline

Starbucks disclosed a bug submitted by zayn1337
Reflected XSS in https://www.starbucks.com/account/create/redeem/MCP131XSR via xtl_amount, xtl_coupon_code, xtl_amount_type parameters

13 Nov 2019 timeline

Starbucks disclosed a bug submitted by johnstone
Information disclosure on sim.starbucks.com

13 Nov 2019 timeline

Starbucks disclosed a bug submitted by johnstone
Webshell via File Upload on ecjobs.starbucks.com.cn

13 Nov 2019 timeline

Starbucks disclosed a bug submitted by johnstone
XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspx

13 Nov 2019 timeline

The Internet disclosed a bug submitted by hxd
putty pscp client-side post-auth stack buffer overwrite when processing remote file size

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-5157 OpenJPEG opj_dwt_interleave_v Out-of-Bounds Write Vulnerability

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-7163 OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-3183 OpenJPEG sycc422_to_rgb Out-of-Bounds Read Vulnerability

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-4796 OpenJPEG color_cmyk_to_rgb Out-of-Bounds Read Vulnerability

12 Nov 2019 timeline

The Internet disclosed a bug submitted by 6u9hunt3r
CVE-2016-1924 OpenJPEG opj_tgt_reset Out-of-Bounds Read Vulnerability

12 Nov 2019 timeline

1 2 3 ... 385

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.