Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Null pointer dereference in mrb_class'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Garbage collector crash'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Null pointer dereference in ary_concat '

15 Apr 2017

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'Multiple DOMXSS on Amplify Web Player'

15 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'mksahilisr' 
b'https://portal.nextcloud.com/.htaccess file is readable'

14 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'ilsani' 
b'kh_put_iv SEGFAULT - mruby 1.2.0'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'ilsani' 
b'SIGSEGV in array_copy - array.c:71'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'sukhoi' 
b'Heap buffer overflow in mruby value_move'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'icanthack' 
b'SIGSEGV - mrb_yield_with_class'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'icanthack' 
b'mrb_vm_exec - null ptr dereference'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'mg36' 
b'Heap use-after-free in mrb_vm_exec '

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'charliesome' 
b'Segmentation fault when a Ruby method is invoked by a C method via Object#send'

13 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a DoD website'

13 Apr 2017

b'Robinhood' disclosed a bug submitted by b'jon_bottarini' 
b'Open Redirect located at https://www.robinhood.com/oauth2/authorize/?'

13 Apr 2017

b'GitLab' disclosed a bug submitted by b'chalker' 
b'Unfiltered `class` attribute in markdown code'

13 Apr 2017

b'Dovecot' disclosed a bug submitted by b'edio' 
b'Dovecot authentication is vulnerable to timing attacks.'

13 Apr 2017

b'Dropbox' disclosed a bug submitted by b'sunilj995' 
b'CSV Injection with the CVS export feature'

13 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'haxor_kids' 
b'Invalid request may lead content spoofing for phishing'

12 Apr 2017

b'VK.com' disclosed a bug submitted by b'povargek' 
b'????? 2??-??????? ??????????? / 2FA Bypass'

12 Apr 2017

b'Harvest' disclosed a bug submitted by b'jobert' 
b'Client can redirect payment, causing payment discrepancy between Harvest and PayPal'

12 Apr 2017

1 ... 557 558 559 560 561 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM