Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'shopify-scripts' disclosed a bug submitted by b'charliesome' 
b'Null target_class DoS'

17 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'brakhane' 
b"Crash: mrb_any_to_s can't handle NilClass, Symbol and Fixnum"

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'brakhane' 
b'Crash: A call to Symbol.new leads to a crash when inspecting the resulting object'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'brakhane' 
b'mruby-time: Crash host with uninitialized Time obj'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'brakhane' 
b'Crash: calling Proc::initialize_copy with a Proc instance where initialize never ran leads to a crash'

16 Dec 2016

b'Shopify' disclosed a bug submitted by b'zuh4n' 
b"Stored XSS at 'Buy Button' page"

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'dkasak' 
b'Segfault in mruby, mruby_engine and the parent MRI Ruby due to null pointer dereference'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'dkasak' 
b'Segfault and/or potential unwanted (byte)code execution with "break" and "||=" inside a loop'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'TOCTTOU bug in mrb_str_setbyte leading the memory corruption'

16 Dec 2016

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Unauthenticated Stored XSS on <any>.myshopify.com via checkout page'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'isra17' 
b'Memory disclosure in mruby String#lines method'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'raydot' 
b'Type confusion in mrb_exc_set leading to memory corruption'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'brakhane' 
b'Crash: Initialize Decimal with itself triggers an assertion'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'isra17' 
b'Exception cause SIGABRT'

16 Dec 2016

b'shopify-scripts' disclosed a bug submitted by b'isra17' 
b'Use after free vulnerability in mruby Array#to_h causing DOS possible RCE'

16 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'teemuk' 
b'Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)'

15 Dec 2016

b'Harvest' disclosed a bug submitted by b'bugs3ra' 
b'Stored XSS in Restoring Archived Tasks'

15 Dec 2016

b'LocalTapiola' disclosed a bug submitted by b'monish' 
b'Poodle attack SSLv3 Support (viestinta.lahitapiola.fi)'

15 Dec 2016

b'Blockchain' disclosed a bug submitted by b'goodman97' 
b'server version dislosure'

15 Dec 2016

b'Zendesk' disclosed a bug submitted by b'virtualhunter' 
b'XSS in zendesk.com/product/'

15 Dec 2016

1 ... 625 626 627 628 629 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM