Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'clew' 
b'StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts'

07 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'0xche' 
b'Path traversal using symlink'

07 Oct 2019

b'GitLab' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Know whether private project name exists or not within a group using link comments'

07 Oct 2019

b'Liberapay' disclosed a bug submitted by b'rajauzairabdullah' 
b'Full Path disclosure on 500 error'

05 Oct 2019

b'LibSass' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92'

05 Oct 2019

b'curl' disclosed a bug submitted by b'geeknik' 
b'Signed integer overflow in tool_progress_cb()'

04 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'mada_uk' 
b'Trojan:JS/CoinMiner in npm files'

04 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'malcolmx' 
b'RCE Jira(CVE-2019\xe2\x80\x9311581) [my-com.atlassian.net]'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'libtiff 4.0.6 heap bufer overflow / out of bounds read (CVE-2016-9273)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'libtiff 4.0.6 segfault / read outside of buffer (CVE-2016-9297)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'CVE-2017-11367: Global buffer overflow (READ of size 4) in shoco C library '

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'CVE-2017-10965: Null pointer dereference in Irssi <1.0.4 '

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'CVE-2017-5969: libxml2 when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'Denial of service in libxml2, using malicious lzma file to consume available system memory'

04 Oct 2019

b'Rockstar Games' disclosed a bug submitted by b'geeknik' 
b'full path disclosure on www.rockstargames.com via apache filename brute forcing'

04 Oct 2019

b'Tor' disclosed a bug submitted by b'geeknik' 
b'Use of unitialized value in token_check_object (src/or/parsecommon.c:224)'

04 Oct 2019

b'PHP (IBB)' disclosed a bug submitted by b'geeknik' 
b'Use after free with assign by ref to overloaded objects'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'pngcrush double-free/segfault could result in DoS (CVE-2015-7700)'

04 Oct 2019

b'The Internet' disclosed a bug submitted by b'geeknik' 
b'pngcrush_measure_idat() off-by-one error (CVE-2015-2158)'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'karimrahal' 
b'[REMOTE] Full Account Takeover At https://??????????????/CAS/'

04 Oct 2019

1 ... 370 371 372 373 374 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM