Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`memjs` allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage'

27 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'n0n4me' 
b'[buttle] Path traversal in mid-buttle module allows to read any file in the server.'

27 Jun 2018

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b'Invalid Phabricator API token revealed through error message when escalating a report'

27 Jun 2018

b'HackerOne' disclosed a bug submitted by b'ashish_r_padelkar' 
b'User object in GraphQL exposes number of trial reports for External Programs that also have a Private Program'

27 Jun 2018

b'Twitter' disclosed a bug submitted by b'arjuniet' 
b'Improper session handling on web browsers'

26 Jun 2018

b'HackerOne' disclosed a bug submitted by b'r3naissance' 
b'People who interviewed for HackerOne security analyst position can be enumerated and their personal email address may be exposed'

25 Jun 2018

b'Starbucks' disclosed a bug submitted by b'0xpatrik' 
b'Subdomain takeover on svcgatewayus.starbucks.com'

25 Jun 2018

b'VK.com' disclosed a bug submitted by b'pisarenko' 
b'?????????? ???? ??????????? ???????? ??? ?????? ????????? ???? ??? ????? '

24 Jun 2018

b'Badoo' disclosed a bug submitted by b'isaeva' 
b'?????????? ?????/??????? ?????????????'

24 Jun 2018

b'LocalTapiola' disclosed a bug submitted by b'billy_blaze' 
b'User able to access company details in yrityspalvelu without proper permissions'

22 Jun 2018

b'Vanilla' disclosed a bug submitted by b'samux' 
b'A user can comment in private discussions without having permission to access the discussion'

22 Jun 2018

b'LocalTapiola' disclosed a bug submitted by b'petruknisme' 
b'F5 BIG-IP Cookie Remote Information Disclosure'

21 Jun 2018

b'Nextcloud' disclosed a bug submitted by b'mandark' 
b'The session token in the URL'

19 Jun 2018

b'LocalTapiola' disclosed a bug submitted by b'ozzyoz' 
b'Sitemap causing strain on your Lahitapiola.fi server'

19 Jun 2018

b'Node.js third-party modules' disclosed a bug submitted by b'greendog' 
b'Insecure implementation of deserialization in cryo'

19 Jun 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it' 
b'Format String Vulnerability in the EdgeSwitch restricted CLI'

19 Jun 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it' 
b'Code Execution in restricted CLI of EdgeSwitch'

19 Jun 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it' 
b'Authenticated RCE in ToughSwitch'

19 Jun 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'maxpl0it' 
b'Triggering RCE using XSS to bypass CSRF in PowerBeam M5 300'

19 Jun 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'CRLF injection mcs.mail.ru (leads to XSS)'

19 Jun 2018

1 ... 486 487 488 489 490 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM