Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Robinhood' disclosed a bug submitted by b'd04k34d3v1l' 
b'httponly flag not set + csrftoken in url'

16 Apr 2017

b'BrickFTP' disclosed a bug submitted by b'eboda' 
b'File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessed'

16 Apr 2017

b'Gratipay' disclosed a bug submitted by b'whit537' 
b'Harden resend throttling'

16 Apr 2017

b'Imgur' disclosed a bug submitted by b'orange' 
b'Remote Code Execution on Git.imgur-dev.com '

16 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'ssarong' 
b'Null pointer dereferences from mrb_vm_exec'

16 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Invalid pointer dereference in OP_ENTER'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Null pointer dereference in OP_ENTER'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Null pointer dereference in mrb_class'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Garbage collector crash'

15 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Null pointer dereference in ary_concat '

15 Apr 2017

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'Multiple DOMXSS on Amplify Web Player'

15 Apr 2017

b'Nextcloud' disclosed a bug submitted by b'mksahilisr' 
b'https://portal.nextcloud.com/.htaccess file is readable'

14 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'ilsani' 
b'kh_put_iv SEGFAULT - mruby 1.2.0'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'ilsani' 
b'SIGSEGV in array_copy - array.c:71'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'sukhoi' 
b'Heap buffer overflow in mruby value_move'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'icanthack' 
b'SIGSEGV - mrb_yield_with_class'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'icanthack' 
b'mrb_vm_exec - null ptr dereference'

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'mg36' 
b'Heap use-after-free in mrb_vm_exec '

13 Apr 2017

b'shopify-scripts' disclosed a bug submitted by b'charliesome' 
b'Segmentation fault when a Ruby method is invoked by a C method via Object#send'

13 Apr 2017

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a DoD website'

13 Apr 2017

1 ... 579 580 581 582 583 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM