Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'iylz' 
b'error parse uri path in curl'

13 May 2022

b'curl' disclosed a bug submitted by b'pappacoda' 
b'Memory leak in CURLOPT_XOAUTH2_BEARER'

13 May 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'Cookie injection from non-secure context'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-016: Query to detect insecure configuration of Spring Boot Actuator'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf '

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-552 Add sources and sinks to detect unsafe getResource calls in Java EE applications'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-321 - Query to detect hardcoded JWT secret keys'

13 May 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-27778: curl removes wrong file on error'

12 May 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-27782: TLS and SSH connection too eager reuse'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ghostxsec' 
b'[CVE-2020-3452] Unauthenticated file read in Cisco ASA'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ghostxsec' 
b'[CVE-2020-3452] Unauthenticated file read in Cisco ASA'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ghostxsec' 
b'CVE-2020-3187 - Unauthenticated Arbitrary File Deletion'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ghostxsec' 
b'CVE-2020-3187 - Unauthenticated Arbitrary File Deletion'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'SQL Injection on https:///'

12 May 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'SQL Injection on '

12 May 2022

b'Recorded Future' disclosed a bug submitted by b'subuganz' 
b'Storage of old passwords in plain text format'

12 May 2022

b'PlayStation' disclosed a bug submitted by b'm00nbsd' 
b'Remote kernel heap overflow'

11 May 2022

b'curl' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-30115: HSTS bypass via trailing dot'

11 May 2022

b'curl' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-27780: percent-encoded path separator in URL host'

11 May 2022

1 ... 144 145 146 147 148 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM