Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Image Injection/XSS vulnerability affecting https://www.rockstargames.com/newswire/article'

24 Jun 2020

b'Rocket.Chat' disclosed a bug submitted by b'steven_julian22' 
b'[Security Vulnerability Rocket.chat] HTML Injection into Email via Signup'

24 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'eirini' 
b'Directory traversal allows execution of arbitrary binaries usign doveadm exec'

23 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'kasperkarlsson' 
b'[service.engelvoelkers.com] XSS in /video/id'

23 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'leoastorga_g' 
b'[H1-2006 2020] CTF Writeup'

22 Jun 2020

b'8x8' disclosed a bug submitted by b'madrobot' 
b'Publicly accessible .svn repository - aastraconf.packet8.net'

22 Jun 2020

b'8x8' disclosed a bug submitted by b'madrobot' 
b'Hardcoded credentials in Android App'

22 Jun 2020

b'8x8' disclosed a bug submitted by b'madrobot' 
b'Post based XSS (Cross site scripting) on https://apimgr.8x8.com'

22 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'bcobain23' 
b'[H1-2006 2020] Bypassing access control checks by modifying the URL, internal application state, or the HTML page, or using a custom API attack tool'

22 Jun 2020

b'8x8' disclosed a bug submitted by b'bugify12334' 
b'Blind Command Injection #1'

22 Jun 2020

b'Greenhouse.io' disclosed a bug submitted by b'lonelyhuman' 
b'SSH port on store.greenhouse.io is vulnerable to brute force attacks'

22 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'zoczus' 
b'[H1-2006 2020] Multiple vulnerabilities allow to leak sensitive information '

22 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'luminougat' 
b'[H1-2006 2020] CTF Writeup'

22 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'rreiss' 
b'[H1-2006 2020] From multiple vulnerabilities to complete ATO on any customer account and staff admin'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Null pointer deference in call to `mail_get_flags`'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'null dereference in `sieve_address_do_validate` (or redundant null check)'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Panic: Input stream data unexpectedly has references'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Panic in file smtp-address.c: line 684 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))'

22 Jun 2020

b'HackerOne' disclosed a bug submitted by b'little-one' 
b'Uploading large payload on domain instructions causes server-side DoS'

20 Jun 2020

b'RATELIMITED' disclosed a bug submitted by b'0xd0ff' 
b'Source code disclosure at ???'

20 Jun 2020

1 ... 291 292 293 294 295 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM