Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'kadler15' 
b'[https-proxy-agent] Socket returned without TLS upgrade on non-200 CONNECT response, allowing request data to be sent over unencrypted connection'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[screenshot.mail.ru] CRLF Injection'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[special.mail.ru] Information Disclosure'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[health.mail.ru] ????????? SSI ?????????'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'l33tcyberops' 
b'Publicly Accessible Harshi Corp Consul'

25 Sep 2019

b'Semmle' disclosed a bug submitted by b'testanull' 
b'Privilege escalation in workers container '

25 Sep 2019

b'Perl (IBB)' disclosed a bug submitted by b'etsukata' 
b'[CVE-2018-18313] regcomp: heap-buffer-overflow read in S_grok_bslash_N'

25 Sep 2019

b'Perl (IBB)' disclosed a bug submitted by b'etsukata' 
b'[CVE-2018-18312] regcomp: heap-buffer-overflow write / reg_node overrun'

25 Sep 2019

b'Twitter' disclosed a bug submitted by b'jackb898' 
b'XSS and Open Redirect on MoPub Login'

24 Sep 2019

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'The return of the ?'

24 Sep 2019

b'Brave Software' disclosed a bug submitted by b'ryotak' 
b'Stored XSS in localhost:* via integrated torrent downloader'

24 Sep 2019

b'OpenSSL (IBB)' disclosed a bug submitted by b'mirchr' 
b'Windows builds with insecure path defaults (CVE-2019-1552)'

24 Sep 2019

b'New Relic' disclosed a bug submitted by b'reformedot' 
b'Mixed content issues on newrelic.com'

23 Sep 2019

b'OLX' disclosed a bug submitted by b'f_m' 
b'web cache deception in https://tradus.com lead to name/user_id enumeration and other info'

22 Sep 2019

b'OLX' disclosed a bug submitted by b'littlestar' 
b'Reflected XSS on https://www.olx.co.id/iklan/*.html via "ad_type" parameter'

21 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'the_predator' 
b'Disable 2FA via CSRF (Leads to 2FA Bypass)'

21 Sep 2019

b'ok.ru' disclosed a bug submitted by b'iframe' 
b'[insideok.ru] Remote Command Execution via file upload.'

20 Sep 2019

b'ICQ' disclosed a bug submitted by b'protex0r' 
b'Code Injection in macOS Desktop Client'

20 Sep 2019

b'PuTTY (European Commission - D' disclosed a bug submitted by b'niky1235' 
b'Heap overflow happen when receiving short length key from ssh server using ssh protocol 1'

20 Sep 2019

b'The Internet' disclosed a bug submitted by b'pwnsdx' 
b'Mailsploit: a sender spoofing bug in over 30 email clients'

19 Sep 2019

1 ... 388 389 390 391 392 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM