Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Doppler' disclosed a bug submitted by b'kirasys' 
b'Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages'

09 Jan 2021

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'Open Redirect Vulnerability on TikTok Ads Portal '

09 Jan 2021

b'curl' disclosed a bug submitted by b'jlleitschuh' 
b'SSRF via maliciously crafted URL due to host confusion'

08 Jan 2021

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Stored XSS on the job page'

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'dmzem' 
b' - " " VK Pay. , .'

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b'Path Traversal iOS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'manaenckov' 
b'XSS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b's_p_q_r' 
b'[m.vk.com] XSS /artist/ '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' /'

08 Jan 2021

b'pixiv' disclosed a bug submitted by b'fanar' 
b'Bypass extension check leads to stored XSS at https://s2.booth.pm'

08 Jan 2021

b'curl' disclosed a bug submitted by b'creid' 
b'Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time'

08 Jan 2021

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer' 
b'SAML authentication bypass through unauthenticated `addSamlProvider` Meteor Call'

08 Jan 2021

b'curl' disclosed a bug submitted by b'geeknik' 
b'Heap Buffer Overflow (READ of size 1) in ourWriteOut'

08 Jan 2021

b'curl' disclosed a bug submitted by b'geeknik' 
b'libcurl: SMTP end-of-response out-of-bounds read - CVE-2019-3823'

08 Jan 2021

b'curl' disclosed a bug submitted by b'tsedlmeyer' 
b'curl still vulnerable to SMB access smuggling via FILE URL on Windows'

08 Jan 2021

b'curl' disclosed a bug submitted by b'major_tom' 
b'Curl_auth_create_plain_message integer overflow leads to heap buffer overflow'

08 Jan 2021

b'GitLab' disclosed a bug submitted by b'vaib25vicky' 
b'Able to leak private email of any user given his/her username via graphql'

08 Jan 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'Rate limit function bypass can leads to occur huge critical problem into website. '

08 Jan 2021

b'curl' disclosed a bug submitted by b'lersek-rh' 
b'curl successfully matches IP address literal in URL against IP address literal in certificate Common Name'

08 Jan 2021

b'curl' disclosed a bug submitted by b'salvet' 
b'Only OpenSSL handles a CRL when passed in via CApath '

08 Jan 2021

1 ... 237 238 239 240 241 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM