Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'[Source Engine] Material path truncation leads to Remote Code Execution'

06 May 2021

b'Sifchain' disclosed a bug submitted by b'a-heybati' 
b'xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of service'

06 May 2021

b'Mail.ru' disclosed a bug submitted by b'b404c057ae68e03c3dc721d' 
b'CVE-2020-3187 ip 91.231.115.30'

06 May 2021

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://top.mail.ru/edit? for site counter (Rate Limit bypass via IP Rotation)'

06 May 2021

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Clickjacking Vulnerability via https://profile.my.games/gamecenter/profile/ can lead to sensitive cross site actions (Bypass X-Frame-Options)'

06 May 2021

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://mirror.w1.dwar.ru/login.php'

06 May 2021

b'Moneybird' disclosed a bug submitted by b'0xprial' 
b"Bypass of Rate limiting in secure_session endpoint's password input will lead to user password disclosure "

06 May 2021

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Editing Pentest Summary Report Answers After Submitting Them'

06 May 2021

b'HackerOne' disclosed a bug submitted by b'whhackersbr' 
b'Changing the 2FA secret key and backup codes without knowing the 2FA OTP'

06 May 2021

b'Valve' disclosed a bug submitted by b'gamer7112' 
b'Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source Games'

05 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management When Using Bit Operations'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'[Java] CWE-094: Query to detect Groovy Code Injections'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'Java: JSONP Injection'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'artem' 
b'[Java] Query for detecting Jakarta Expression Language injections'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-348: Use of less trusted source'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management After Refactoring The Code'

04 May 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[JAVA]: CWE-347 - Improper Verification of Cryptographic Signature : Potential for Auth Bypass'

04 May 2021

b'Valve' disclosed a bug submitted by b'pixelindigo' 
b'GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE'

04 May 2021

b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'[GoldSrc] Remote Code Execution using malicious WAD list in BSP file'

04 May 2021

b'Valve' disclosed a bug submitted by b'slidybat' 
b'OOB reads in network message handlers leads to RCE'

04 May 2021

1 ... 231 232 233 234 235 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM