Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'grzegol' 
b'CodeQL query to detect OGNL injections'

06 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-295 - Incorrect Hostname Verification - MitM'

06 Jul 2020

b'PlayStation' disclosed a bug submitted by b'theflow0' 
b'Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W Primitives'

06 Jul 2020

b'LocalTapiola' disclosed a bug submitted by b'madrobot' 
b'Open redirect - user interaction needed (verkkopalvelu.lahitapiola.fi/e2/..) - based on #179328'

06 Jul 2020

b'Courier' disclosed a bug submitted by b'hackerboy404' 
b'Logout page does not prevent CSRF'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'yashrs' 
b'[H1-2006 2020] CTF Writeup'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'shakedko' 
b'@shakedko H1-2006 CTF writeup'

06 Jul 2020

b'h1-ctf' disclosed a bug submitted by b'kapytein' 
b'[h1-2006 CTF] Multiple vulnerabilities leading to account takeover and two-factor authentication bypass allows to send pending bounty payments'

06 Jul 2020

b'DRIVE.NET, Inc.' disclosed a bug submitted by b'sandesh_shinde' 
b'Testing for arbitrary HTTP methods'

06 Jul 2020

b'Endless Hosting' disclosed a bug submitted by b'codermak' 
b'Enumeration of username on password reset page'

05 Jul 2020

b'Node.js' disclosed a bug submitted by b'coreyfarrell' 
b'Child process environment injection via prototype pollution'

04 Jul 2020

b'concrete5' disclosed a bug submitted by b'mayllart' 
b'Remote Code Execution through Extension Bypass on Log Functionality'

03 Jul 2020

b'concrete5' disclosed a bug submitted by b'solov9ev' 
b'Stored XSS in the file search filter'

03 Jul 2020

b'concrete5' disclosed a bug submitted by b'solov9ev' 
b'Stored XSS on express entries'

03 Jul 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Malformed HTTP/2 SETTINGS frame leads to reachable assert'

03 Jul 2020

b'Stripo Inc' disclosed a bug submitted by b'what_web' 
b'[www.stripo.email] There is no rate limit for /it/contact-us/ endpoints'

03 Jul 2020

b'Stripo Inc' disclosed a bug submitted by b'mraldersonn' 
b'multiple email usage -my.stripo.email-'

03 Jul 2020

b'8x8' disclosed a bug submitted by b'manantch' 
b'PHPinfo page on http://?????.callstats.io'

02 Jul 2020

b'Node.js' disclosed a bug submitted by b'galgo' 
b'Node.js HTTP/2 Large Settings Frame DoS'

02 Jul 2020

b'Node.js' disclosed a bug submitted by b'tniessen' 
b'napi_get_value_string_X allow various kinds of memory corruption'

02 Jul 2020

1 ... 287 288 289 290 291 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM