Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Null dereference or redundant null check in `mail_crypt_load_global_private_key` for plugin mail-crypt'

07 Jul 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Out of memory with combination of `test_config_set` and `test_config_reload`'

07 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'CodeQL query for disabled revocation checking'

06 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java: CWE-273 Unsafe certificate trust'

06 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'grzegol' 
b'CodeQL query to detect OGNL injections'

06 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-295 - Incorrect Hostname Verification - MitM'

06 Jul 2020

b'PlayStation' disclosed a bug submitted by b'theflow0' 
b'Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W Primitives'

06 Jul 2020

b'LocalTapiola' disclosed a bug submitted by b'madrobot' 
b'Open redirect - user interaction needed (verkkopalvelu.lahitapiola.fi/e2/..) - based on #179328'

06 Jul 2020

b'Courier' disclosed a bug submitted by b'hackerboy404' 
b'Logout page does not prevent CSRF'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'yashrs' 
b'[H1-2006 2020] CTF Writeup'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'shakedko' 
b'@shakedko H1-2006 CTF writeup'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'kapytein' 
b'[h1-2006 CTF] Multiple vulnerabilities leading to account takeover and two-factor authentication bypass allows to send pending bounty payments'

06 Jul 2020

b'DRIVE.NET, Inc.' disclosed a bug submitted by b'sandesh_shinde' 
b'Testing for arbitrary HTTP methods'

06 Jul 2020

b'Endless Hosting' disclosed a bug submitted by b'codermak' 
b'Enumeration of username on password reset page'

05 Jul 2020

b'Node.js' disclosed a bug submitted by b'coreyfarrell' 
b'Child process environment injection via prototype pollution'

04 Jul 2020

b'concrete5' disclosed a bug submitted by b'mayllart' 
b'Remote Code Execution through Extension Bypass on Log Functionality'

03 Jul 2020

b'concrete5' disclosed a bug submitted by b'solov9ev' 
b'Stored XSS in the file search filter'

03 Jul 2020

b'concrete5' disclosed a bug submitted by b'solov9ev' 
b'Stored XSS on express entries'

03 Jul 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Malformed HTTP/2 SETTINGS frame leads to reachable assert'

03 Jul 2020

b'Stripo Inc' disclosed a bug submitted by b'what_web' 
b'[www.stripo.email] There is no rate limit for /it/contact-us/ endpoints'

03 Jul 2020

1 ... 282 283 284 285 286 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM