Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP (IBB)' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (READ of size 48) in exif_read_data()'

01 Sep 2018

b'concrete5' disclosed a bug submitted by b'gamliel' 
b'Stored XSS on Add Calendar'

01 Sep 2018

b'concrete5' disclosed a bug submitted by b'gamliel' 
b'Stored XSS on Add Event in Calendar'

01 Sep 2018

b'Khan Academy' disclosed a bug submitted by b'cyberdolt' 
b'Possible Subdomain Takeover'

31 Aug 2018

b'Reverb.com' disclosed a bug submitted by b'nadino' 
b'Items bought for free due to lacks of quantity controls'

31 Aug 2018

b'WordPress' disclosed a bug submitted by b'zee_shan' 
b'[mercantile.wordpress.org] Reflected XSS'

30 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'n0n4me' 
b'[simplehttpserver] List any file in the folder by using path traversal.'

30 Aug 2018

b'Eobot' disclosed a bug submitted by b'r1chard' 
b'XSS on link in eobot account page'

30 Aug 2018

b'New Relic' disclosed a bug submitted by b'fbogner' 
b'Insecure Infrastructure Integrations YML Loading leads to Windows Privilege Escalation'

29 Aug 2018

b'WordPress' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Arbitrary file deletion in wp-core - guides towards RCE and information disclosure'

29 Aug 2018

b'Valve' disclosed a bug submitted by b'yalter' 
b'Buffer overflows in demo parsing'

28 Aug 2018

b'Valve' disclosed a bug submitted by b'chippy' 
b'Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation'

28 Aug 2018

b'Rocket.Chat' disclosed a bug submitted by b'edoverflow' 
b"Remote code execution by hijacking an unclaimed S3 bucket in Rocket.Chat's installation script."

28 Aug 2018

b'Weblate' disclosed a bug submitted by b'mur90210' 
b'Audit log validation'

28 Aug 2018

b'Weblate' disclosed a bug submitted by b'japz' 
b'Insecure Account Removal #2'

28 Aug 2018

b'Uber' disclosed a bug submitted by b'peuch' 
b'Information Leakage - GitHub - VCenter configuration scripts, StorMagic usernames and password along with default ESXi root password'

27 Aug 2018

b'Uber' disclosed a bug submitted by b'peuch' 
b'Information Leak - GitHub - Endpoint Configuration Details'

27 Aug 2018

b'Weblate' disclosed a bug submitted by b'footstep' 
b' Account Restore / Reactivating an old email via old reset link'

27 Aug 2018

b'Weblate' disclosed a bug submitted by b'footstep' 
b'Running 2 accounts with a single email #3'

27 Aug 2018

b'' disclosed a bug submitted by b'michiel' 
b'Remote Code Execution on Proxy Service (as root)'

27 Aug 2018

1 ... 432 433 434 435 436 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM