The unofficial HackerOne disclosure Timeline

b'Liberapay' disclosed a bug submitted by b'rajauzairabdullah'
b'Full Path disclosure on 500 error'

05 Oct 2019 timeline

b'LibSass' disclosed a bug submitted by b'geeknik'
b'heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92'

05 Oct 2019 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'Signed integer overflow in tool_progress_cb()'

04 Oct 2019 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'mada_uk'
b'Trojan:JS/CoinMiner in npm files'

04 Oct 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'malcolmx'
b'RCE Jira(CVE-2019\xe2\x80\x9311581) [my-com.atlassian.net]'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'libtiff 4.0.6 heap bufer overflow / out of bounds read (CVE-2016-9273)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'libtiff 4.0.6 segfault / read outside of buffer (CVE-2016-9297)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'CVE-2017-11367: Global buffer overflow (READ of size 4) in shoco C library '

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'CVE-2017-10965: Null pointer dereference in Irssi <1.0.4 '

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'CVE-2017-5969: libxml2 when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'Denial of service in libxml2, using malicious lzma file to consume available system memory'

04 Oct 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'geeknik'
b'full path disclosure on www.rockstargames.com via apache filename brute forcing'

04 Oct 2019 timeline

b'Tor' disclosed a bug submitted by b'geeknik'
b'Use of unitialized value in token_check_object (src/or/parsecommon.c:224)'

04 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'geeknik'
b'Use after free with assign by ref to overloaded objects'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'pngcrush double-free/segfault could result in DoS (CVE-2015-7700)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'pngcrush_measure_idat() off-by-one error (CVE-2015-2158)'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'karimrahal'
b'[REMOTE] Full Account Takeover At https://??????????????/CAS/'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi'
b'Path traversal on ????????'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jin'
b'XXE in DoD website that may lead to RCE'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl'
b'IDOR on DoD Website exposes FTP users and passes linked to all accounts!'

04 Oct 2019 timeline

1 ... 402 403 404 405 406 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.