Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Monero' disclosed a bug submitted by b'l00ph0le' 
b'Monero Wallet Gui for Windows (Arbitrary Code Execution)'

18 Nov 2019

b'VK.com' disclosed a bug submitted by b'korniltsev' 
b'?????? ? com.vk.usersstore.UsersContentProvider, ???????? ?????? exchange_token ?? android < 21'

18 Nov 2019

b'Slack' disclosed a bug submitted by b'hanno' 
b'Linux Desktop application slack executable does not use pie / no ASLR'

17 Nov 2019

b'WordPress' disclosed a bug submitted by b'irsdl' 
b'"Bad Protocols Validation" Bypass in "wp_kses_bad_protocol_once" using HTML-encoding without trailing semicolons'

16 Nov 2019

b'Ruby' disclosed a bug submitted by b'358' 
b'WEBrick::HTTPAuth::DigestAuth authentication is vulnerable to regular expression denial of service (ReDoS)'

15 Nov 2019

b'QIWI' disclosed a bug submitted by b'circuit' 
b'?????-?? ???????? ??? ? ????? ????? http://shop.tochka.com'

15 Nov 2019

b'Monero' disclosed a bug submitted by b'ftramer' 
b'Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity'

15 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[iot-hackathon.geekbrains.ru] Tilda Subdomain Takeover'

15 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'worki.ru: SMS code bruteforce'

15 Nov 2019

b'Kartpay' disclosed a bug submitted by b'hami' 
b'bypass captcha in the form forgot password'

14 Nov 2019

b'Starbucks' disclosed a bug submitted by b'zayn1337' 
b'Reflected XSS in https://www.starbucks.com/account/create/redeem/MCP131XSR via xtl_amount, xtl_coupon_code, xtl_amount_type parameters'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Information disclosure on sim.starbucks.com'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'Webshell via File Upload on ecjobs.starbucks.com.cn'

13 Nov 2019

b'Starbucks' disclosed a bug submitted by b'johnstone' 
b'XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspx'

13 Nov 2019

b'The Internet' disclosed a bug submitted by b'hxd' 
b'putty pscp client-side post-auth stack buffer overwrite when processing remote file size '

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-5157 OpenJPEG opj_dwt_interleave_v Out-of-Bounds Write Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-7163 OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3183 OpenJPEG sycc422_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

b'The Internet' disclosed a bug submitted by b'6u9hunt3r' 
b'CVE-2016-4796 OpenJPEG color_cmyk_to_rgb Out-of-Bounds Read Vulnerability'

12 Nov 2019

1 ... 386 387 388 389 390 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM