Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'cjun' 
b'Integer overflow at line 1603 in the src/operator.c file'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Buffer write overflow when forming dns over http request'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Resource leak when using a normal site as DOH server'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'Potential invocation of qsort on uninitialized memory during cookie save'

08 Feb 2021

b'curl' disclosed a bug submitted by b'pauldreik' 
b'use after free in cookie.c'

08 Feb 2021

b'curl' disclosed a bug submitted by b'supersausage' 
b'curl on Windows can be forced to execute code via OpenSSL environment variables'

08 Feb 2021

b'curl' disclosed a bug submitted by b'nyymi' 
b'Unexpected access to process open files via file:///proc/self/fd/n'

08 Feb 2021

b'curl' disclosed a bug submitted by b'danielmarjamaki' 
b'Division by zero if terminal width is 2'

08 Feb 2021

b'curl' disclosed a bug submitted by b'invictus1306' 
b'Integer overlow in "header_append" function'

08 Feb 2021

b'curl' disclosed a bug submitted by b'sfpskywood' 
b'Integer overflow in the source code tool_cb_prg.c'

08 Feb 2021

b'Shopify' disclosed a bug submitted by b'sandeepk09' 
b"Low privileged user can create high privileged user's KITCRM authorization token and can read and write message to KIT"

07 Feb 2021

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'Database error shown to the user when using a long guest name in richdocuments'

07 Feb 2021

b'Lark Technologies' disclosed a bug submitted by b'mike12' 
b'Stored XSS & SSRF in Lark Docs'

05 Feb 2021

b'Sixt GmbH & Co. Autovermietung KG BBP' disclosed a bug submitted by b'h_-_cker' 
b'Cross domain token leakage via Referer header'

05 Feb 2021

b'Kubernetes' disclosed a bug submitted by b'lazydog' 
b'DoS for GCSArtifact.RealAll'

04 Feb 2021

b'Kubernetes' disclosed a bug submitted by b'vavkamil' 
b'XSS on kubernetes-csi.github.io (mdBook)'

04 Feb 2021

b'Twitter' disclosed a bug submitted by b'milankatwal' 
b' Github Account hijack through broken link in developer.twitter.com'

04 Feb 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-326: Query to detect weak encryption with an insufficient key size'

04 Feb 2021

b'Topcoder' disclosed a bug submitted by b'can1337' 
b"IDOR at https://fast.trychameleon.com/observe/v2/profiles/ via uid parameter discloses users' PII data"

03 Feb 2021

b'CS Money' disclosed a bug submitted by b'mr_vrush' 
b'Able to upload backgrounds before entering 2FA'

03 Feb 2021

1 ... 228 229 230 231 232 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM