Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a DoD website'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'Code reversion allowing SQLI again in ???????'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b"PII leakage due to caching of Order/Contract ID's on ?????????"

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'modam3r5' 
b'sql injection on /messagecenter/messagingcenter at https://www.???????/'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'manshum12' 
b'???????? SQL'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0_1vitthal' 
b'SQL Injection on www.?????????? on countID parameter'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi' 
b'SSRF on ????????'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thermaltpp' 
b'Admin panel take over | User info leakage | Mass Comprimise'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong' 
b'https://???????? Impacted by DNN ImageHandler SSRF'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'albinowax' 
b'Request smuggling on ????????'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps' 
b'Online training material disclosing username and password'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ruffdraft' 
b'2 vulnerabilities of arbitrary code in ???????? - CVE-2017-5929'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'Open FTP server on a DoD system'

08 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Remote OS command Execution in the 3 more Oracle Weblogic on the ????????, ????, ??????? [CVE-2017-10352]'

08 Oct 2019

b'Shopify' disclosed a bug submitted by b'clew' 
b'StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts'

07 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'0xche' 
b'Path traversal using symlink'

07 Oct 2019

b'GitLab' disclosed a bug submitted by b'ashish_r_padelkar' 
b'Know whether private project name exists or not within a group using link comments'

07 Oct 2019

b'Liberapay' disclosed a bug submitted by b'rajauzairabdullah' 
b'Full Path disclosure on 500 error'

05 Oct 2019

b'LibSass' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92'

05 Oct 2019

b'curl' disclosed a bug submitted by b'geeknik' 
b'Signed integer overflow in tool_progress_cb()'

04 Oct 2019

1 ... 375 376 377 378 379 ... 743

BY DENIS WERNER - @NOBBD - IMPRESSUM