Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'VK.com' disclosed a bug submitted by b'executor' 
b'Path Traversal iOS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'manaenckov' 
b'XSS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b's_p_q_r' 
b'[m.vk.com] XSS /artist/ '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' /'

08 Jan 2021

b'pixiv' disclosed a bug submitted by b'fanar' 
b'Bypass extension check leads to stored XSS at https://s2.booth.pm'

08 Jan 2021

b'curl' disclosed a bug submitted by b'creid' 
b'Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time'

08 Jan 2021

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer' 
b'SAML authentication bypass through unauthenticated `addSamlProvider` Meteor Call'

08 Jan 2021

b'curl' disclosed a bug submitted by b'geeknik' 
b'Heap Buffer Overflow (READ of size 1) in ourWriteOut'

08 Jan 2021

b'curl' disclosed a bug submitted by b'geeknik' 
b'libcurl: SMTP end-of-response out-of-bounds read - CVE-2019-3823'

08 Jan 2021

b'curl' disclosed a bug submitted by b'tsedlmeyer' 
b'curl still vulnerable to SMB access smuggling via FILE URL on Windows'

08 Jan 2021

b'curl' disclosed a bug submitted by b'major_tom' 
b'Curl_auth_create_plain_message integer overflow leads to heap buffer overflow'

08 Jan 2021

b'GitLab' disclosed a bug submitted by b'vaib25vicky' 
b'Able to leak private email of any user given his/her username via graphql'

08 Jan 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'Rate limit function bypass can leads to occur huge critical problem into website. '

08 Jan 2021

b'curl' disclosed a bug submitted by b'lersek-rh' 
b'curl successfully matches IP address literal in URL against IP address literal in certificate Common Name'

08 Jan 2021

b'curl' disclosed a bug submitted by b'salvet' 
b'Only OpenSSL handles a CRL when passed in via CApath '

08 Jan 2021

b'curl' disclosed a bug submitted by b'd4d' 
b'Abusing URL Parsers by long schema name'

08 Jan 2021

b'curl' disclosed a bug submitted by b'bagder' 
b'CVE-2020-8285: FTP wildcard stack overflow'

08 Jan 2021

b'Kubernetes' disclosed a bug submitted by b'rhynorater' 
b'Blind SSRF on velodrome.canary.k8s.io'

07 Jan 2021

b'Logitech' disclosed a bug submitted by b'hammodmt' 
b'Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing'

07 Jan 2021

b'Kubernetes' disclosed a bug submitted by b'jsafrane' 
b'csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVC'

07 Jan 2021

1 ... 214 215 216 217 218 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM