The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi'
b'Stored XSS via 64(?) vulnerable fields in leads to credential theft/account takeover'

10 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'skarsom'
b'Insecure credentials on staging app at leads to application takeover'

10 Feb 2021 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sleepnotf0und'
b'Reflected XSS In https://'

10 Feb 2021 timeline

b'Lark Technologies' disclosed a bug submitted by b'mike12'
b'RPC Implementation allows unauthenticated remote calls'

10 Feb 2021 timeline

b'Automattic' disclosed a bug submitted by b'fuzzme'
b'[intensedebate.com] Open Redirect'

10 Feb 2021 timeline

b'Yelp' disclosed a bug submitted by b'alexbirsan'
b'RCE on build server via misconfigured pip install'

09 Feb 2021 timeline

b'PayPal' disclosed a bug submitted by b'alexbirsan'
b'RCE via npm misconfig -- installing internal libraries from the public registry'

09 Feb 2021 timeline

b'Omise' disclosed a bug submitted by b'malicious_mind528hz'
b'assets/vendor.js file exposing sentry.io token and DNS and application id .'

09 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'vepe'
b'CVE-2020-8284: trusting FTP PASV responses'

09 Feb 2021 timeline

b'Lyst' disclosed a bug submitted by b'gamer7112'
b'DOM XSS on http://talks.lystit.com'

09 Feb 2021 timeline

b'Acronis' disclosed a bug submitted by b'lucasandracoli'
b'Broken Access Controls'

09 Feb 2021 timeline

b'Acronis' disclosed a bug submitted by b'mosaa404'
b'licenses key disclosure'

09 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'pendrek'
b'huge COLUMNS causes progress-bar to buffer overflow'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'cjun'
b'Integer overflow at line 1603 in the src/operator.c file'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'pauldreik'
b'Buffer write overflow when forming dns over http request'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'pauldreik'
b'Resource leak when using a normal site as DOH server'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'pauldreik'
b'Potential invocation of qsort on uninitialized memory during cookie save'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'pauldreik'
b'use after free in cookie.c'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'supersausage'
b'curl on Windows can be forced to execute code via OpenSSL environment variables'

08 Feb 2021 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'Unexpected access to process open files via file:///proc/self/fd/n'

08 Feb 2021 timeline

1 ... 260 261 262 263 264 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.