Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'team_tsk' 
b'https:/// Vulnerable to CVE-2013-3827 (Directory-traversal vulnerability)'

26 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'logic_err0r' 
b'Sensitive information on '

26 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'logic_err0r' 
b"Sensitive information on ''"

26 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'whoisbinit' 
b'[CVE-2021-29156] LDAP Injection at https://'

26 Aug 2021

b'Python (IBB)' disclosed a bug submitted by b'blarsen' 
b'Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)'

25 Aug 2021

b'Python (IBB)' disclosed a bug submitted by b'jordyzomer' 
b'Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1'

25 Aug 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[C#]: Deserialization sinks'

25 Aug 2021

b'GitHub Security Lab' disclosed a bug submitted by b'thank_you' 
b'[Python] CWE-943: Add NoSQL Injection Query'

25 Aug 2021

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Enumerating HackerOne Pentests'

25 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Disclosure handle private program with external link'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Attachment object in GraphQL continues to grant access to files, even if they are removed from rendering'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can reveal the names of private programs that have an external link and Enterprise Product Edition'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can reveal the names of private programs that have an external link'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'The possibility of disrupting the normal operation of frontend using markdown'

24 Aug 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Hackers can find out the ID of private programs'

24 Aug 2021

b'New Relic' disclosed a bug submitted by b'dee-see' 
b"GitHub Integration doesn't sanitize repository URLs which might be attacker-controlled"

23 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b' The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b'CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'bags' 
b'CVE-2017-13019: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()'

22 Aug 2021

b'Data Processing (IBB)' disclosed a bug submitted by b'nathaniellives' 
b'CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()'

22 Aug 2021

1 ... 205 206 207 208 209 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM