Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi' 
b'SSRF on ????????'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thermaltpp' 
b'Admin panel take over | User info leakage | Mass Comprimise'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong' 
b'https://???????? Impacted by DNN ImageHandler SSRF'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'albinowax' 
b'Request smuggling on ????????'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps' 
b'Online training material disclosing username and password'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ruffdraft' 
b'2 vulnerabilities of arbitrary code in ???????? - CVE-2017-5929'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'Open FTP server on a DoD system'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Remote OS command Execution in the 3 more Oracle Weblogic on the ????????, ????, ??????? [CVE-2017-10352]'

08 Oct 2019

b'Shopify' disclosed a bug submitted by b'clew' 
b'StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts'

07 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'0xche' 
b'Path traversal using symlink'

07 Oct 2019

b'GitLab' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Know whether private project name exists or not within a group using link comments'

07 Oct 2019

b'Liberapay' disclosed a bug submitted by b'rajauzairabdullah' 
b'Full Path disclosure on 500 error'

05 Oct 2019

b'LibSass' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92'

05 Oct 2019

b'curl' disclosed a bug submitted by b'geeknik' 
b'Signed integer overflow in tool_progress_cb()'

04 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'mada_uk' 
b'Trojan:JS/CoinMiner in npm files'

04 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'malcolmx' 
b'RCE Jira(CVE-2019\xe2\x80\x9311581) [my-com.atlassian.net]'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'libtiff 4.0.6 heap bufer overflow / out of bounds read (CVE-2016-9273)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'libtiff 4.0.6 segfault / read outside of buffer (CVE-2016-9297)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'CVE-2017-11367: Global buffer overflow (READ of size 4) in shoco C library '

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'CVE-2017-10965: Null pointer dereference in Irssi <1.0.4 '

04 Oct 2019

1 ... 370 371 372 373 374 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM