Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ICQ' disclosed a bug submitted by b'protex0r' 
b'Code Injection in macOS Desktop Client'

20 Sep 2019

b'PuTTY (European Commission - D' disclosed a bug submitted by b'niky1235' 
b'Heap overflow happen when receiving short length key from ssh server using ssh protocol 1'

20 Sep 2019

b'The Internet' disclosed a bug submitted by b'pwnsdx' 
b'Mailsploit: a sender spoofing bug in over 30 email clients'

19 Sep 2019

b'GitLab' disclosed a bug submitted by b'vijay_kumar1110' 
b'Add and Access to Labels of any Private Projects/Groups of Gitlab(IDOR)'

19 Sep 2019

b'Ubiquiti Inc.' disclosed a bug submitted by b'linkks' 
b'JetBrains .idea project directory'

19 Sep 2019

b'Zomato' disclosed a bug submitted by b'chajer' 
b'Information Disclosure through Sentry Instance ???????'

19 Sep 2019

b'OLX' disclosed a bug submitted by b'nullcod3r' 
b'Reflected XSS in www.olx.co.id'

19 Sep 2019

b'Twitter' disclosed a bug submitted by b'anshuman_pattnaik' 
b'AppLovin API Key hardcoded in a Github repo'

18 Sep 2019

b'Shopify' disclosed a bug submitted by b'eissen5c' 
b'Clickjacking in [exchangemarketplace.com]'

18 Sep 2019

b'VK.com' disclosed a bug submitted by b'linkks' 
b'Information Disclosure (phpinfo())'

18 Sep 2019

b'VK.com' disclosed a bug submitted by b'linkks' 
b'????? swag'

18 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'obayda' 
b'Settings page in https://support.my.com is vulnerable to clickjacking'

18 Sep 2019

b'RSK' disclosed a bug submitted by b'ahook' 
b'Attacker can add arbitrary data to the blockchain without paying gas'

18 Sep 2019

b'RSK' disclosed a bug submitted by b'z3t' 
b'DoS through PeerExplorer'

18 Sep 2019

b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'Unchecked weapon id in WeaponList message parser on client leads to RCE'

17 Sep 2019

b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution'

17 Sep 2019

b'Valve' disclosed a bug submitted by b'nyancat0131' 
b'Malformed playlist.txt in GoldSrc games leads to Access Violation & arbitrary code execution'

17 Sep 2019

b'MyCrypto' disclosed a bug submitted by b'zeroxyele' 
b'The twitter accounts are linked on page but unclaimed.'

17 Sep 2019

b'ICQ' disclosed a bug submitted by b'metnew' 
b'ICQ for macOS: lack of `com.apple.quarantine` meta-attribute on downloaded files leads to GateKeeper/Quarantine bypass for downloaded executables'

17 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Xss Reflected On spgw.terrhq.ru [ url ]'

16 Sep 2019

1 ... 406 407 408 409 410 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM