Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'kylecolson' 
b'Brute Force Attack against PIN on Card History Page Could Lead to Card Information Discovery / Fraud'

28 Feb 2017

b'Slack' disclosed a bug submitted by b'fransrosen' 
b'Stealing xoxs-tokens using weak postMessage / call-popup redirect to current team domain'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'aerodudrizzt' 
b"segafult in mruby's sprintf - mrb_str_format"

28 Feb 2017

b'Snapchat' disclosed a bug submitted by b'kontez' 
b'RTLO char allowed in chat'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Heap Buffer overflow in mrb_ary_unshift'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Use After Free in mrb_vm_exec'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Incorrect code generation with redo inside NODE_RESCUE.'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Recursion causing uninitialized memory reads leading to a segfault'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ahmadsherif' 
b'A crash when an exception is caught in a caller and the receiver returned from `ensure`'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'd4nny' 
b'Denial of service (segfault) due to null pointer dereference in mrb_vm_exec'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'd4nny' 
b'Denial of service (segfault) due to null pointer dereference in mrb_obj_instance_eval'

28 Feb 2017

b'Informatica' disclosed a bug submitted by b'grampae' 
b'[uk.informatica.com] XSS on uk.informatica..com'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'titanous' 
b'Heap buffer oveflow with many arguments'

28 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Segmentfault at mrb_vm_exec'

28 Feb 2017

b'Shopify' disclosed a bug submitted by b'avlidienbrunn' 
b'Subdomain takeover on s3.shopify.com'

27 Feb 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Heap Buffer overflow in mrb_funcall_with_block'

27 Feb 2017

b'Zomato' disclosed a bug submitted by b'cydefenser' 
b'test.zba.se is vulnerable to SSL POODLE '

27 Feb 2017

b'Ruby' disclosed a bug submitted by b'dataalchemist' 
b'Writable RubyCi Amazon s3 bucket'

27 Feb 2017

b'Ruby' disclosed a bug submitted by b'rootredrain' 
b"Ruby:HTTP Header injection in 'net/http'"

27 Feb 2017

b'Twitter' disclosed a bug submitted by b'zigoo0' 
b'Remote Unrestricted file Creation/Deletion and Possible RCE.'

26 Feb 2017

1 ... 553 554 555 556 557 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM