Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rocket.Chat' disclosed a bug submitted by b'w2w' 
b'Blind SQL injection in third-party software, that allows to reveal user statistic from rocket.chat and possibly hack into the rocketchat.agilecrm.com'

17 Oct 2019

b'Nextcloud' disclosed a bug submitted by b'sohelahmed786' 
b'Exposing debug.log file leads to server full path disclosure'

17 Oct 2019

b'VK.com' disclosed a bug submitted by b'povargek' 
b'?????? ????? email ????????????? ???? ???????????? ????? ?????, ? ??? ?? ????? ?????? ????????'

17 Oct 2019

b'Ruby' disclosed a bug submitted by b'ooooooo_q' 
b'Null character at fnmatch'

16 Oct 2019

b'Ruby' disclosed a bug submitted by b'ooooooo_q' 
b'Potential command injection in `Shell#[]` and `Shell#test`'

16 Oct 2019

b'Starbucks' disclosed a bug submitted by b'stealthy' 
b'Reflected cross-site scripting on multiple Starbucks assets.'

16 Oct 2019

b'Brave Software' disclosed a bug submitted by b'xiaoyinl' 
b'[Brave browser] WebTorrent has DNS rebinding vulnerability'

16 Oct 2019

b'Keybase' disclosed a bug submitted by b'u3mur4' 
b'XSS on Desktop Client'

16 Oct 2019

b'Semmle' disclosed a bug submitted by b'testanull' 
b'Worker container escape lead to arbitrary file reading in host machine'

16 Oct 2019

b'Slack' disclosed a bug submitted by b'virtualhunter' 
b'XSS vulnerable parameter in a location hash'

16 Oct 2019

b'Apache httpd (IBB)' disclosed a bug submitted by b'cy1337' 
b'mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082)'

15 Oct 2019

b'Apache httpd (IBB)' disclosed a bug submitted by b'cy1337' 
b'mod_http2, memory corruption on early pushes (CVE-2019-10081)'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'Use-After-Free / Double-Free in WDDX Deserialize'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'Type Confusion Vulnerability - SOAP / make_http_soap_request()'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'\tOut-of-Bound Read in phar_parse_zipfile()'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'Heap corruption in tar/zip/phar parser'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'Multiple Heap Overflow due to integer overflows | xml/filter_url/addcslashes'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'l4w' 
b'Uninitialized pointer in phar_make_dirstream()'

15 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'jakkdu' 
b'Integer overflow in wordwrap'

14 Oct 2019

b'Python (IBB)' disclosed a bug submitted by b'jakkdu' 
b'Heapoverflow in zipimporter module'

14 Oct 2019

1 ... 317 318 319 320 321 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM