Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'taraszelyk' 
b'Avatar upload allows arbitrary file overwriting'

28 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Blind SSRF [ Sentry Misconfiguraton ]'

27 Sep 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'root_pwn' 
b'Criticals Stored (XSS) at - 7TH AIR FORCE'

27 Sep 2019

b'Node.js third-party modules' disclosed a bug submitted by b'3la2kb' 
b'Application level denial of service due to shutting down the server '

27 Sep 2019

b'Twitter' disclosed a bug submitted by b'antisocial_eng' 
b'Ability to perform actions (Tweet, Retweet, DM) and other actions, unauthenticated, on any account with SMS enabled.'

26 Sep 2019

b'Valve' disclosed a bug submitted by b'xi-tauw' 
b'Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows Client'

26 Sep 2019

b'The Internet' disclosed a bug submitted by b'tiran' 
b'Silent omission of certificate hostname verification in LibreSSL and BoringSSL'

26 Sep 2019

b'The Internet' disclosed a bug submitted by b'adam_iwaniuk' 
b'CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host'

26 Sep 2019

b'The Internet' disclosed a bug submitted by b'mehqq' 
b'Exim off-by-one RCE vulnerability'

26 Sep 2019

b'The Internet' disclosed a bug submitted by b'pnig0s' 
b'Mercurial git subrepo lead to arbritary command injection'

26 Sep 2019

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'lucash-dev' 
b'Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`'

26 Sep 2019

b'phpBB' disclosed a bug submitted by b'hanno' 
b'CSS injection via BB code tag "?????"'

26 Sep 2019

b'Twitter' disclosed a bug submitted by b'deeptiman' 
b'Periscope-all Firebase database takeover'

25 Sep 2019

b'Perl (IBB)' disclosed a bug submitted by b'jkrshnmenon' 
b'Integer overflow leading to buffer overflow'

25 Sep 2019

b'SEMrush' disclosed a bug submitted by b'farmsec_alice' 
b'Github information leaked'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'Web Cache Poisoning'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'???????? ????? '

25 Sep 2019

b'Node.js third-party modules' disclosed a bug submitted by b'kadler15' 
b'[https-proxy-agent] Socket returned without TLS upgrade on non-200 CONNECT response, allowing request data to be sent over unencrypted connection'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[screenshot.mail.ru] CRLF Injection'

25 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'bobrov' 
b'[special.mail.ru] Information Disclosure'

25 Sep 2019

1 ... 406 407 408 409 410 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM