Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'kxyry' 
b"[uchat.uberinternals.com] Mattermost doesn't check Origin in Websockets, which leads to the Critical Inforamation Leakage."

23 Mar 2023

b'Uber' disclosed a bug submitted by b'kxyry' 
b'[data-07.uberinternal.com] SSRF in Portainer app lead to access to Internal Docker API without Auth'

23 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-27537: HSTS double-free'

23 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyxsorcerer' 
b'Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)'

23 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27538: SSH connection too eager reuse still'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27536: GSS delegation too eager connection re-use'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27535: FTP too eager connection reuse'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27534: SFTP path ~ resolving discrepancy'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27533: Telnet option IAC injection'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'gregxsunday' 
b'[Go]: Add Beego.Input.RequestBody source to Beego framework'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'sim4n6' 
b'[Python] Unsafe unpacking using shutil.unpack_archive() query and tests'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Python : Add query to detect PAM authorization bypass '

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'4b5f5f4b' 
b'[CPP]Add query to detect bugs like CVE-2017-5123'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'sim4n6' 
b'[python] TarSlip vulnerability improvements'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'C/C++: Command injection via wordexp'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-125 Out-of-bounds Read with different interpretation of the string when use mbtowc '

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'CPP: Pam Authorization Bypass'

22 Mar 2023

b'pixiv' disclosed a bug submitted by b'kuzu7shiki' 
b'Stealing Users OAuth authorization code via redirect_uri'

22 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'hackit_bharat' 
b'Missing brute force protection on password confirmation modal'

21 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27536: GSS delegation too eager connection re-use'

20 Mar 2023

1 ... 124 125 126 127 128 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM