Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'VK.com' disclosed a bug submitted by b'heeeeen' 
b'Stealing Private Information in VK Android App through PlayerProxy Port Remotely'

02 Sep 2018

b'VK.com' disclosed a bug submitted by b'executor' 
b'?????? ? ????????????????? faq '

02 Sep 2018

b'Weblate' disclosed a bug submitted by b'logan47' 
b'Tab nabbing via window.opener'

01 Sep 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[exceljs] Possible XSS via cell value when worksheet is displayed in browser'

01 Sep 2018

b'PHP (IBB)' disclosed a bug submitted by b'geeknik' 
b'CVE-2018-12882: heap-use-after-free in PHP 7.2 through 7.2.6, possible 7.2.7'

01 Sep 2018

b'PHP (IBB)' disclosed a bug submitted by b'geeknik' 
b'heap-buffer-overflow (READ of size 48) in exif_read_data()'

01 Sep 2018

b'concrete5' disclosed a bug submitted by b'gamliel' 
b'Stored XSS on Add Calendar'

01 Sep 2018

b'concrete5' disclosed a bug submitted by b'gamliel' 
b'Stored XSS on Add Event in Calendar'

01 Sep 2018

b'Khan Academy' disclosed a bug submitted by b'cyberdolt' 
b'Possible Subdomain Takeover'

31 Aug 2018

b'Reverb.com' disclosed a bug submitted by b'nadino' 
b'Items bought for free due to lacks of quantity controls'

31 Aug 2018

b'WordPress' disclosed a bug submitted by b'zee_shan' 
b'[mercantile.wordpress.org] Reflected XSS'

30 Aug 2018

b'Node.js third-party modules' disclosed a bug submitted by b'n0n4me' 
b'[simplehttpserver] List any file in the folder by using path traversal.'

30 Aug 2018

b'Eobot' disclosed a bug submitted by b'r1chard' 
b'XSS on link in eobot account page'

30 Aug 2018

b'New Relic' disclosed a bug submitted by b'fbogner' 
b'Insecure Infrastructure Integrations YML Loading leads to Windows Privilege Escalation'

29 Aug 2018

b'WordPress' disclosed a bug submitted by b'b258ea62bf297b02afa9854' 
b'Arbitrary file deletion in wp-core - guides towards RCE and information disclosure'

29 Aug 2018

b'Valve' disclosed a bug submitted by b'yalter' 
b'Buffer overflows in demo parsing'

28 Aug 2018

b'Valve' disclosed a bug submitted by b'chippy' 
b'Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation'

28 Aug 2018

b'Rocket.Chat' disclosed a bug submitted by b'edoverflow' 
b"Remote code execution by hijacking an unclaimed S3 bucket in Rocket.Chat's installation script."

28 Aug 2018

b'Weblate' disclosed a bug submitted by b'mur90210' 
b'Audit log validation'

28 Aug 2018

b'Weblate' disclosed a bug submitted by b'japz' 
b'Insecure Account Removal #2'

28 Aug 2018

1 ... 441 442 443 444 445 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM