Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'null dereference in `sieve_address_do_validate` (or redundant null check)'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Panic: Input stream data unexpectedly has references'

22 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Panic in file smtp-address.c: line 684 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))'

22 Jun 2020

b'HackerOne' disclosed a bug submitted by b'little-one' 
b'Uploading large payload on domain instructions causes server-side DoS'

20 Jun 2020

b'RATELIMITED' disclosed a bug submitted by b'0xd0ff' 
b'Source code disclosure at ???'

20 Jun 2020

b'Visma Public' disclosed a bug submitted by b'base_64' 
b'[CSRF]While Closing and opening Fiscal year.'

19 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'vakzz' 
b'[h1-2006 CTF] Payments for May have been processed!'

19 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'nirvana_msu' 
b'[H1-2006] CTF Writeup'

19 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'w31rd0' 
b'[H1-2006 2020] The Story of Making Bounty Hunters Happy'

19 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'0xxl' 
b'[h1-2006 2020] Writeup h12006 CTF'

19 Jun 2020

b'Khan Academy' disclosed a bug submitted by b'5kyw41k3r' 
b'Unauthorised Account Detail Modification '

19 Jun 2020

b'QIWI' disclosed a bug submitted by b'honoki' 
b'Remote Code Execution on contactws.contact-sys.com via SQL injection in TCertObject operation "Delete"'

19 Jun 2020

b'QIWI' disclosed a bug submitted by b'honoki' 
b'SQL injection on contactws.contact-sys.com in TScenObject action ScenObjects leads to remote code execution'

19 Jun 2020

b'QIWI' disclosed a bug submitted by b'honoki' 
b'SQL injection on contactws.contact-sys.com in TRateObject.AddForOffice in USER_ID parameter leads to remote code execution'

19 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'bugra' 
b"[H1-2006 2020] I made the CEO's bounty payment!"

18 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'anvikha' 
b'[sapper] Path Traversal'

18 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'abrasax' 
b'[wappalyzer] ReDoS allows an attacker to completely break Wappalyzer'

18 Jun 2020

b'Rocket.Chat' disclosed a bug submitted by b'tomp1' 
b'SAML authentication bypass'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'diegobernal' 
b'[H1-2006 2020] CTF write-up'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'enzyro' 
b'[H1-2006 2020] In-depth resolution of the h1-2006 CTF'

18 Jun 2020

1 ... 328 329 330 331 332 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM