Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP (IBB)' disclosed a bug submitted by b'chamal' 
b'Uninitialized read in exif_process_IFD_in_TIFF'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'chamal' 
b'Uninitialized read in exif_process_IFD_in_MAKERNOTE'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'chamal' 
b'Invalid Read on exif_process_SOFn'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'chamal' 
b'Uninitialized read in gdImageCreateFromXbm'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'hacker2nd' 
b'CVE-2016-7418 PHP Out-Of-Bounds Read in php_wddx_push_element'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'hacker2nd' 
b'PHP Integer Overflow in gdImageWebpCtx'

10 Oct 2020

b'PHP (IBB)' disclosed a bug submitted by b'cy1337' 
b'Heap Buffer Overflow (READ: 4) in phar_parse_pharfile'

10 Oct 2020

b'Logitech' disclosed a bug submitted by b'raywando' 
b'GET based Open redirect on [streamlabs.com/content-hub/streamlabs-obs/search?query=]'

09 Oct 2020

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[api.tumblr.com] Exploiting clickjacking vulnerability to trigger self DOM-based XSS'

09 Oct 2020

b'CS Money' disclosed a bug submitted by b'niggy' 
b'Improper authentication in the load sell inventory page'

08 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'ja3far' 
b'Stored Xss '

07 Oct 2020

b'Vercel' disclosed a bug submitted by b'morax' 
b'User personal data disclosure via API'

07 Oct 2020

b'BugPoC' disclosed a bug submitted by b'absshax' 
b'LFI to steal /etc/passwd - Bypass filter in the <meta property="og:image"> tag via redirect and much more'

07 Oct 2020

b'Starbucks' disclosed a bug submitted by b'k3mlol' 
b'Thailand - SNMP Publicly Accessible'

07 Oct 2020

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b'Elasticsearch leaks data through the notes scope'

06 Oct 2020

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b"Transferring a public group to a private group doesn't remove code from the Elastichsearch API search result"

06 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Forgot Password Page SMS Brute Force could lead to Account Takeover using Android/IOS app "About the house" via api.prodom.smart.space'

06 Oct 2020

b'NordVPN' disclosed a bug submitted by b'th3pr0xyb0y' 
b'Password Reset Link Leaked In Refer Header In Request To Third Party Sites '

06 Oct 2020

b'Acronis' disclosed a bug submitted by b'full109tun' 
b'Missing rate limit for current password field (Password Change) Account Takeover'

06 Oct 2020

b'ZIVVER' disclosed a bug submitted by b'swaysthinking' 
b'XXE Injection through SVG image upload leads to SSRF'

06 Oct 2020

1 ... 291 292 293 294 295 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM