Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'OOB read in TS_OBJ_print_bio() (CVE-2016-2180)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'Certificate message OOB reads (CVE-2016-6306)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'Excessive allocation of memory in tls_get_message_header() (CVE-2016-6307)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'Excessive allocation of memory in dtls1_preprocess_fragment() (CVE-2016-6308)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'OOB write in MDC2_Update() (CVE-2016-6303)'

25 May 2017

b'OpenSSL (IBB)' disclosed a bug submitted by b'theyarestone' 
b'OOB write in BN_bn2dec() (CVE-2016-2182)'

25 May 2017

b'Cuvva' disclosed a bug submitted by b'shepard' 
b'https://admin.corp.cuvva.co/ is vulnerable to Clickjacking attacks due to missing X-Frame-Options '

24 May 2017

b'Rockstar Games' disclosed a bug submitted by b'rz01' 
b'<- Critical IDOR vulnerability in socialclub allow to insert and delete comments as another user and it discloses sensitive information ->'

24 May 2017

b'OLX' disclosed a bug submitted by b'anonymans' 
b"Combined attacks leading to stealing user's account"

24 May 2017

b'Maximum' disclosed a bug submitted by b'exr' 
b'Cross-site Scripting (XSS) on [maximum.nl] '

24 May 2017

b'Cuvva' disclosed a bug submitted by b'kenziy' 
b'cuvva.com website CSP "script-src" includes "unsafe-inline"'

24 May 2017

b'Cuvva' disclosed a bug submitted by b'd04k34d3v1l' 
b'RC4 cipher suit in use in vpn.corp.cuvva.co'

24 May 2017

b'Rockstar Games' disclosed a bug submitted by b'exception' 
b'Profile bio at rockstar is accepting control characters'

23 May 2017

b'Rockstar Games' disclosed a bug submitted by b'exception' 
b'Control Character Injection In Messages'

23 May 2017

b'HackerOne' disclosed a bug submitted by b'mikkocarreon' 
b'Information leakage via CSV when content is valid JavaScript'

23 May 2017

b'Weblate' disclosed a bug submitted by b'mrr3boot' 
b'CSP "script-src" includes "unsafe-inline" in weblate.org and demo.weblate.org'

23 May 2017

b'HackerOne' disclosed a bug submitted by b'jigarthakkar39' 
b'Race condition leads to duplicate payouts'

23 May 2017

b'ownCloud' disclosed a bug submitted by b'lukasreschke' 
b'HTML injection in Desktop Client'

23 May 2017

b'HackerOne' disclosed a bug submitted by b'sainaen' 
b"A HackerOne employee's GitHub personal access token exposed in Travis CI build logs"

23 May 2017

b'HackerOne' disclosed a bug submitted by b'dhauenstein' 
b'www.hackerone.com website CSP "script-src" includes "unsafe-inline"'

23 May 2017

1 ... 582 583 584 585 586 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM