Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'hanno' 
b'Linux Desktop application slack executable does not use pie / no ASLR'

17 Nov 2019

b'WordPress' disclosed a bug submitted by b'irsdl' 
b'"Bad Protocols Validation" Bypass in "wp_kses_bad_protocol_once" using HTML-encoding without trailing semicolons'

16 Nov 2019

b'Ruby' disclosed a bug submitted by b'358' 
b'WEBrick::HTTPAuth::DigestAuth authentication is vulnerable to regular expression denial of service (ReDoS)'

15 Nov 2019

b'QIWI' disclosed a bug submitted by b'circuit' 
b'?????-?? ???????? ??? ? ????? ????? http://shop.tochka.com'

15 Nov 2019

b'Monero' disclosed a bug submitted by b'ftramer' 
b'Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity'

15 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[iot-hackathon.geekbrains.ru] Tilda Subdomain Takeover'

15 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'worki.ru: SMS code bruteforce'

15 Nov 2019

b'Kartpay' disclosed a bug submitted by b'hami' 
b'bypass captcha in the form forgot password'

14 Nov 2019

b'Starbucks' disclosed a bug submitted by b'zayn1337' 
b'Reflected XSS in https://www.starbucks.com/account/create/redeem/MCP131XSR via xtl_amount, xtl_coupon_code, xtl_amount_type parameters'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Information disclosure on sim.starbucks.com'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Webshell via File Upload on ecjobs.starbucks.com.cn'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspx'

13 Nov 2019

b'The Internet' disclosed a bug submitted by b'hxd' 
b'putty pscp client-side post-auth stack buffer overwrite when processing remote file size '

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-5157 OpenJPEG opj_dwt_interleave_v Out-of-Bounds Write Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-7163 OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3183 OpenJPEG sycc422_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-4796 OpenJPEG color_cmyk_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-1924 OpenJPEG opj_tgt_reset Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'penrose' 
b'The \xe2\x80\x9cMalstaller\xe2\x80\x9d Attack, global hijacking of any installation process to achieve RCE with elevated privileges, Windows OS (vendor agnostic) '

12 Nov 2019

1 ... 383 384 385 386 387 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM