The unofficial HackerOne disclosure Timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'CVE-2017-5969: libxml2 when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'Denial of service in libxml2, using malicious lzma file to consume available system memory'

04 Oct 2019 timeline

b'Rockstar Games' disclosed a bug submitted by b'geeknik'
b'full path disclosure on www.rockstargames.com via apache filename brute forcing'

04 Oct 2019 timeline

b'Tor' disclosed a bug submitted by b'geeknik'
b'Use of unitialized value in token_check_object (src/or/parsecommon.c:224)'

04 Oct 2019 timeline

b'PHP (IBB)' disclosed a bug submitted by b'geeknik'
b'Use after free with assign by ref to overloaded objects'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'pngcrush double-free/segfault could result in DoS (CVE-2015-7700)'

04 Oct 2019 timeline

b'The Internet' disclosed a bug submitted by b'geeknik'
b'pngcrush_measure_idat() off-by-one error (CVE-2015-2158)'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'karimrahal'
b'[REMOTE] Full Account Takeover At https://??????????????/CAS/'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'twicedi'
b'Path traversal on ????????'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jin'
b'XXE in DoD website that may lead to RCE'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl'
b'IDOR on DoD Website exposes FTP users and passes linked to all accounts!'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'manoelt'
b'Remote Code Execution (RCE) in a DoD website'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lfb'
b' SQL injections'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'SQL injection on the https://????/'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'SQL Injection in the get_publications.php on the https://?????'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[Critical] Full local fylesystem access (LFI/LFD) as admin via Path Traversal in the misconfigured Java servlet on the https://???/'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nahamsec'
b'LFI with potential to RCE on ?????? using CVE-2019-3396'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs'
b'[Critical] Possibility to takeover any user account #2 without interaction on the https://??????????'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'deputy'
b'?????? Authenticated User Data Disclosure'

04 Oct 2019 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong'
b'https://????????? Vulnerable to CVE-2018-0296 Cisco ASA Path Traversal Authentication Bypass'

04 Oct 2019 timeline

1 ... 406 407 408 409 410 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.