Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'PII Leak of Personal at https://www.'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Stored XSS via 64(?) vulnerable fields in leads to credential theft/account takeover'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'skarsom' 
b'Insecure credentials on staging app at leads to application takeover'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sleepnotf0und' 
b'Reflected XSS In https://'

10 Feb 2021

b'Lark Technologies' disclosed a bug submitted by b'mike12' 
b'RPC Implementation allows unauthenticated remote calls'

10 Feb 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] Open Redirect'

10 Feb 2021

b'Yelp' disclosed a bug submitted by b'alexbirsan' 
b'RCE on build server via misconfigured pip install'

09 Feb 2021

b'PayPal' disclosed a bug submitted by b'alexbirsan' 
b'RCE via npm misconfig -- installing internal libraries from the public registry'

09 Feb 2021

b'Omise' disclosed a bug submitted by b'malicious_mind528hz' 
b'assets/vendor.js file exposing sentry.io token and DNS and application id .'

09 Feb 2021

b'curl' disclosed a bug submitted by b'vepe' 
b'CVE-2020-8284: trusting FTP PASV responses'

09 Feb 2021

b'Lyst' disclosed a bug submitted by b'gamer7112' 
b'DOM XSS on http://talks.lystit.com'

09 Feb 2021

b'Acronis' disclosed a bug submitted by b'lucasandracoli' 
b'Broken Access Controls'

09 Feb 2021

b'Acronis' disclosed a bug submitted by b'mosaa404' 
b'licenses key disclosure'

09 Feb 2021

b'curl' disclosed a bug submitted by b'pendrek' 
b'huge COLUMNS causes progress-bar to buffer overflow'

08 Feb 2021

b'curl' disclosed a bug submitted by b'cjun' 
b'Integer overflow at line 1603 in the src/operator.c file'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Buffer write overflow when forming dns over http request'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Resource leak when using a normal site as DOH server'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Potential invocation of qsort on uninitialized memory during cookie save'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'use after free in cookie.c'

08 Feb 2021

b'curl' disclosed a bug submitted by b'supersausage' 
b'curl on Windows can be forced to execute code via OpenSSL environment variables'

08 Feb 2021

1 ... 204 205 206 207 208 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM