Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'The Internet' disclosed a bug submitted by b'xairy' 
b'Linux kernel: CVE-2017-1000112: a memory corruption due to UFO to non-UFO path switch'

11 Sep 2019

b'The Internet' disclosed a bug submitted by b'xairy' 
b'Linux kernel: CVE-2017-7308: a signedness issue in AF_PACKET sockets'

11 Sep 2019

b'The Internet' disclosed a bug submitted by b'jlleitschuh' 
b'Industry-Wide MITM Vulnerability Impacting the JVM Ecosystem'

10 Sep 2019

b'Apache httpd (IBB)' disclosed a bug submitted by b'cy1337' 
b'CVE-2019-0196: mod_http2 with scoreboard Use-After-Free (Read)'

10 Sep 2019

b'The Internet' disclosed a bug submitted by b'skyn3t' 
b'[bower] Arbitrary File Write through improper validation of symlinks while package extraction'

10 Sep 2019

b'Kaspersky' disclosed a bug submitted by b'alesandroortiz' 
b'Stored credentials instantly autofilled within sandboxed iframes'

10 Sep 2019

b'Nextcloud' disclosed a bug submitted by b'laxe' 
b'Veracode and security audit record are publicly available'

10 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'chajer' 
b'Delete images of users with clickjacking in https://pw.mail.ru'

09 Sep 2019

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'lucash-dev' 
b'Steal collateral during `end` process, by earning DSR interest after `flow`.'

09 Sep 2019

b'Shopify' disclosed a bug submitted by b'tems' 
b'Inject page in admin panel via Shopify.API.pushState'

09 Sep 2019

b'Uber' disclosed a bug submitted by b'appsecure_in' 
b"Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter"

09 Sep 2019

b'HackerOne' disclosed a bug submitted by b'japz' 
b'[Bypass #645264] Report title disclosure despite the program settings for email notification is set to "No Content"'

09 Sep 2019

b'Trint Ltd' disclosed a bug submitted by b'xh3n1' 
b'Insecure Zendesk SSO implementation by generating JWT client-side'

08 Sep 2019

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'IDOR in Report CSV export discloses the IDs of Custom Field Attributes of Programs'

06 Sep 2019

b'HackerOne' disclosed a bug submitted by b'hisokamorou' 
b'Disclosure of Program email Title Report when being removed as contributor. Bypass for Report #645264'

06 Sep 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'MitM attacks on HSTS-protected hosts are possible'

05 Sep 2019

b'Nextcloud' disclosed a bug submitted by b'pamper' 
b'Content Spoofing /Text Injection in https://docs.nextcloud.com'

05 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'NULL pointer dereference in `mrb_check_frozen`'

04 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Buffer overflow in yywarning_s'

04 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Invalid read in `str_replace_partial`'

04 Sep 2019

1 ... 368 369 370 371 372 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM