Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby' disclosed a bug submitted by b'mrtc0' 
b"Invalid URL parsing '#'"

01 May 2018

b'Dropbox' disclosed a bug submitted by b'oaidjoaisdjoaisjdioasfsdhfuios' 
b'User Impersonation - Create Support Ticket With Any Registered Account Email'

01 May 2018

b'GitLab' disclosed a bug submitted by b'wuqidashi' 
b'SSRF vulnerability in gitlab.com webhook'

30 Apr 2018

b'Informatica' disclosed a bug submitted by b'strukt' 
b'XXE at Informatica sub-domain'

30 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`superstatic` is vulnerable to path traversal on Windows'

29 Apr 2018

b'Ruby' disclosed a bug submitted by b'tenderlove' 
b'Response splitting vulnerability in WEBrick'

29 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`foreman` is vulnerable to ReDoS in path'

28 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`concat-with-sourcemaps` allocates uninitialized Buffers when number is passed as a separator'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ??????????? ??????????????? ????? ?????? ???????????? ??? ?????? ???????? ???.'

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'exadmin' 
b'DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ????????? ?????? ?? ???????? ????????? ?????? ???????? ?????? "&r"'

28 Apr 2018

b'Ed' disclosed a bug submitted by b'cybertiger' 
b'Session Cookie Without Secure Flag '

28 Apr 2018

b'Zomato' disclosed a bug submitted by b'riya' 
b'[www.zomato.com] IDOR - Gold Subscription Details, Able to view "Membership ID" and "Validity Details" of other Users'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ??????????? ???????? ???? ?????? (???? icqsystem) '

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'muon4' 
b"Authorization issue on 'valtakirjat' (/e2/verkkopalvelu/)"

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'richardtelleng' 
b'Internal IP Address Disclosure at https://www.lahitapiolarahoitus.fi/wp-json/wp/v2/pages'

28 Apr 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'GitLab CI runner can read and poison cache of all other projects'

27 Apr 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Evaluating Ruby code by injecting Rescue job on the system_hook_push queue through web hook'

27 Apr 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Command injection by overwriting authorized_keys file through GitLab import'

27 Apr 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'SQL injection in MilestoneFinder order method'

27 Apr 2018

1 ... 467 468 469 470 471 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM