REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'Attachment object in GraphQL continues to grant access to files, even if they are removed from rendering'
24 Aug 2021
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'Hackers can reveal the names of private programs that have an external link and Enterprise Product Edition'
24 Aug 2021
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'Hackers can reveal the names of private programs that have an external link'
24 Aug 2021
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'The possibility of disrupting the normal operation of frontend using markdown'
24 Aug 2021
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'Hackers can find out the ID of private programs'
24 Aug 2021
b'New Relic'
disclosed a bug submitted by
b'dee-see'
b"GitHub Integration doesn't sanitize repository URLs which might be attacker-controlled"
23 Aug 2021
b'Data Processing (IBB)'
disclosed a bug submitted by
b'bags'
b' The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()'
22 Aug 2021
b'Data Processing (IBB)'
disclosed a bug submitted by
b'bags'
b'CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()'
22 Aug 2021
b'Data Processing (IBB)'
disclosed a bug submitted by
b'bags'
b'CVE-2017-13019: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()'
22 Aug 2021
b'Data Processing (IBB)'
disclosed a bug submitted by
b'nathaniellives'
b'CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()'
22 Aug 2021
b'Data Processing (IBB)'
disclosed a bug submitted by
b'bags'
b'Several protocol parsers in before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal()'
22 Aug 2021
b'VeraCrypt'
disclosed a bug submitted by
b'penrose'
b'Local Privilege Escalation during execution of VeraCryptExpander.exe (UAC bypass)'
22 Aug 2021
b'The Internet'
disclosed a bug submitted by
b'jordyzomer'
b'CVE-2020-9383 Floppy OOB read'
22 Aug 2021
b'Kubernetes'
disclosed a bug submitted by
b'max_lan'
b'kubectl creating secrets from stringData leaves secret in plain text'
21 Aug 2021
b'MTN Group'
disclosed a bug submitted by
b'zero_or_1'
b'information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt'
20 Aug 2021
b'GitLab'
disclosed a bug submitted by
b'retroplasma'
b'When you call your branch the same name as a git hash, it could be checked out by dependents'
19 Aug 2021
b'MTN Group'
disclosed a bug submitted by
b'0x0luke'
b'2x Remote file inclusion within your VMware Instances'
19 Aug 2021
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'0xelkot'
b'XSS on '
19 Aug 2021
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'alyssa_herrera'
b'CUI labled and and Restricted intelligence '
19 Aug 2021
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'fdeleite'
b'XSS due to CVE-2020-3580 [.mil]'
19 Aug 2021
1
...
212
213
214
215
216
...
776
BY DENIS WERNER - @NOBBD -
IMPRESSUM