REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'PHP (IBB)'
disclosed a bug submitted by
b'ryat'
b'Session WDDX Packet Deserialization Type Confusion Vulnerability'
13 Oct 2019
b'PHP (IBB)'
disclosed a bug submitted by
b'ryat'
b'Type Confusion Vulnerability in PHP_to_XMLRPC_worker()'
13 Oct 2019
b'PHP (IBB)'
disclosed a bug submitted by
b'ryat'
b'Use After Free Vulnerability in WDDX Packet Deserialization'
13 Oct 2019
b'Perl (IBB)'
disclosed a bug submitted by
b'aerodudrizzt'
b'Format string implementation vulnerability, resulting in code execution'
13 Oct 2019
b'PHP (IBB)'
disclosed a bug submitted by
b'vah13'
b'potential remote code execution with phar archive '
13 Oct 2019
b'PHP (IBB)'
disclosed a bug submitted by
b'aerodudrizzt'
b'Memory corruption when parsing a hostile PHAR archive'
13 Oct 2019
b'PHP (IBB)'
disclosed a bug submitted by
b'aerodudrizzt'
b'Crash (DoS) when parsing a hostile TIFF'
13 Oct 2019
b'Python (IBB)'
disclosed a bug submitted by
b'aerodudrizzt'
b'Information disclosure in mmap module - python 2.7.12'
13 Oct 2019
b'WordPress'
disclosed a bug submitted by
b'yzy9951'
b'[FG-VD-18-165] Wordpress Cross-Site Scripting Vulnerability Notification II'
11 Oct 2019
b'HackerOne'
disclosed a bug submitted by
b'kunal94'
b'Disclosure of Email title report in quick award paypout email (no content mode)'
11 Oct 2019
b'Shopify'
disclosed a bug submitted by
b'dostoevskylabs'
b'Reflective Cross-site Scripting via Newsletter Form'
11 Oct 2019
b'SEMrush'
disclosed a bug submitted by
b'r0hack'
b'Manipulation of exam results at Semrush.Academy'
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'johndoe1492'
b'OOB XXE '
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'johndoe1492'
b'OOB XXE '
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'mase289'
b'XSS via Cookie in Mail.ru'
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'kiriknik'
b'Blind SSRF on sentry.dev-my.com due to Sentry misconfiguration'
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'iframe'
b'[agent.33slona.ru] Recovery code bruteforce'
11 Oct 2019
b'Mail.ru'
disclosed a bug submitted by
b'iframe'
b'[sso.33slona.ru] Application Messages Error stacktrace PHP.'
11 Oct 2019
b'QIWI'
disclosed a bug submitted by
b'circuit'
b'account takeover https://qiwi.me '
11 Oct 2019
b'Shopify'
disclosed a bug submitted by
b'mariogh'
b'Bypass report #416983 - Removed Staff members who had "Apps" permission can still modify flow app connections'
10 Oct 2019
1
...
400
401
402
403
404
...
771
BY DENIS WERNER - @NOBBD -
IMPRESSUM