Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[Web ICQ Client] XSS-inj in polls'

14 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'IP address can be leaked on Image preview in ICQ for Android chat'

14 Feb 2020

b'Maximum' disclosed a bug submitted by b'rhetoric' 
b"'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning"

14 Feb 2020

b'Slack' disclosed a bug submitted by b'akaki' 
b'URL filter bypass in Enterprise Grid'

14 Feb 2020

b'Node.js' disclosed a bug submitted by b'mpracucci' 
b'Fix for CVE-2018-12122 can be bypassed via keep-alive requests'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Pull Request #12949 - Security Implications without CVE assignment'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Out of order TLS handshake / application data messages lead to segmentation fault'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jasnell' 
b'Denial of Service: nghttp2 use of uninitialized pointer'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'HTTP/2 Denial of Service Vulnerability'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'htuch' 
b'Vulnerability in http-parser & embedded NULL header handling'

13 Feb 2020

b'NordVPN' disclosed a bug submitted by b'd4nt' 
b'Clickjacking at join.nordvpn.com'

13 Feb 2020

b'Polymail, Inc.' disclosed a bug submitted by b'xaleraf4ra' 
b'[share.polymail.io] XSS when uploading a file to the server'

13 Feb 2020

b'Data Processing (IBB)' disclosed a bug submitted by b'bugbasher' 
b'Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option() (CVE-2018-16229)'

13 Feb 2020

b'Data Processing (IBB)' disclosed a bug submitted by b'bugbasher' 
b'Tcpdump before 4.9.3 has a buffer over-read in print-802_11.c (CVE-2018-16227)'

13 Feb 2020

b'Data Processing (IBB)' disclosed a bug submitted by b'geeknik' 
b'tcpdump: CVE-2018-14879 - buffer overflow in tcpdump.c:get_next_file()'

13 Feb 2020

b'MobiSystems Ltd.' disclosed a bug submitted by b'emmano' 
b'Firebase Firestore insecure database'

13 Feb 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'anglecutter' 
b"Stored XSS in 'Notes'"

13 Feb 2020

b'Ruby' disclosed a bug submitted by b'd3athstrok3' 
b'Source code disclosed via S3 Bucket'

13 Feb 2020

b'8x8' disclosed a bug submitted by b'l34r00t' 
b'Sensitive information disclosure'

12 Feb 2020

b'8x8' disclosed a bug submitted by b'konqi' 
b'(Critical) Remote Code Execution Through Old TinyMCE upload bypass'

12 Feb 2020

1 ... 367 368 369 370 371 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM