Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Persistent XSS on public project page'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Labels created in private projects are leaked'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Attacker can delete (and read) private project webhooks'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Attacker can post notes on private MR, snippets, and issues'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Confidential issues leaked in public projects when attached to milestone'

03 May 2016

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Private snippets in public / internal projects leaked though GitLab API'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'geeknik' 
b'ASN.1 BIO excessive memory allocation (CVE-2016-2109)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'Potential double free in EVP_DigestInit_ex'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EVP_EncodeUpdate overflow (CVE-2016-2105)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EVP_EncryptUpdate overflow (CVE-2016-2106)'

03 May 2016

b'OpenSSL' disclosed a bug submitted by b'guido' 
b'EBCDIC overread (CVE-2016-2176)'

03 May 2016

b'The Internet' disclosed a bug submitted by b'stewie' 
b'Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714)'

03 May 2016

b'HackerOne' disclosed a bug submitted by b'pranav_hivarekar' 
b'Spamming any user from Reset Password Function'

03 May 2016

b'Mapbox' disclosed a bug submitted by b'enderun07' 
b'XSS in L.mapbox.shareControl in mapbox.js'

03 May 2016

b'LeaseWeb' disclosed a bug submitted by b'bugs3ra' 
b'PHP and Web Server version disclosed on leasewebnoc.com'

03 May 2016

b'LeaseWeb' disclosed a bug submitted by b'bugs3ra' 
b'Apache version disclosed on developer.leaseweb.com'

03 May 2016

b'Vimeo' disclosed a bug submitted by b'optimus_prime' 
b'No Limitation on Following allows user to follow people automatically!'

02 May 2016

b'Zaption' disclosed a bug submitted by b'bugs3ra' 
b'Using GET method for account login with CSRF token leaking to external sites Via Referer.'

02 May 2016

b'New Relic' disclosed a bug submitted by b'trabajoduro_2' 
b'Too many included lookups'

02 May 2016

b'Veris' disclosed a bug submitted by b'niemand' 
b'XSS on multiple fields'

02 May 2016

1 ... 625 626 627 628 629 ... 715

BY DENIS WERNER - @NOBBD - IMPRESSUM