Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Python (IBB)' disclosed a bug submitted by b'blarsen' 
b'Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)'

25 Aug 2021

b'Python (IBB)' disclosed a bug submitted by b'jordyzomer' 
b'Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1'

25 Aug 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[C#]: Deserialization sinks'

25 Aug 2021

b'GitHub Security Lab' disclosed a bug submitted by b'thank_you' 
b'[Python] CWE-943: Add NoSQL Injection Query'

25 Aug 2021

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Enumerating HackerOne Pentests'

25 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Disclosure handle private program with external link'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Attachment object in GraphQL continues to grant access to files, even if they are removed from rendering'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can reveal the names of private programs that have an external link and Enterprise Product Edition'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can reveal the names of private programs that have an external link'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'The possibility of disrupting the normal operation of frontend using markdown'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can find out the ID of private programs'

24 Aug 2021

b'New Relic' disclosed a bug submitted by b'dee-see' 
b"GitHub Integration doesn't sanitize repository URLs which might be attacker-controlled"

23 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b' The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b'CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b'CVE-2017-13019: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'nathaniellives' 
b'CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b'Several protocol parsers in before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal()'

22 Aug 2021

b'VeraCrypt' disclosed a bug submitted by b'penrose' 
b'Local Privilege Escalation during execution of VeraCryptExpander.exe (UAC bypass)'

22 Aug 2021

b'The Internet' disclosed a bug submitted by b'jordyzomer' 
b'CVE-2020-9383 Floppy OOB read'

22 Aug 2021

b'Kubernetes' disclosed a bug submitted by b'max_lan' 
b'kubectl creating secrets from stringData leaves secret in plain text'

21 Aug 2021

1 ... 154 155 156 157 158 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM