Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[iot-hackathon.geekbrains.ru] Tilda Subdomain Takeover'

15 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'worki.ru: SMS code bruteforce'

15 Nov 2019

b'Kartpay' disclosed a bug submitted by b'hami' 
b'bypass captcha in the form forgot password'

14 Nov 2019

b'Starbucks' disclosed a bug submitted by b'zayn1337' 
b'Reflected XSS in https://www.starbucks.com/account/create/redeem/MCP131XSR via xtl_amount, xtl_coupon_code, xtl_amount_type parameters'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Information disclosure on sim.starbucks.com'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Webshell via File Upload on ecjobs.starbucks.com.cn'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspx'

13 Nov 2019

b'The Internet' disclosed a bug submitted by b'hxd' 
b'putty pscp client-side post-auth stack buffer overwrite when processing remote file size '

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-5157 OpenJPEG opj_dwt_interleave_v Out-of-Bounds Write Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-7163 OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3183 OpenJPEG sycc422_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-4796 OpenJPEG color_cmyk_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-1924 OpenJPEG opj_tgt_reset Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'penrose' 
b'The \xe2\x80\x9cMalstaller\xe2\x80\x9d Attack, global hijacking of any installation process to achieve RCE with elevated privileges, Windows OS (vendor agnostic) '

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'squashbroom' 
b'Incorrect logic in MySQL & MariaDB protocol leads to remote SSRF/Remote file read'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'tarq' 
b'Malicious Server can force read any file on clients system with default configuration in MySQL Clients'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'donnchac' 
b'RCE on default Ubuntu Desktop >= 12.10 Quantal'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'hxd' 
b'CVE-2017-8798 - miniupnp getHTTPResponse chunked encoding integer signedness error'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'ilsani' 
b'Roundcube virtualmin privilege escalation (CVE-2017-8114)'

12 Nov 2019

1 ... 382 383 384 385 386 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM