Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederrss.ricterz.me
HackerOne Hacker Activity
Get the latest updates from HackerOne Hacker Activity directly as they happen.
Follow now 109 followers
Latest posts
Last updated about 2 hours ago
[$12000] Mozilla: Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where)
about 2 hours ago
[$12000] Mozilla: Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift...
Monero: wallet-rpc describe_transfer uses real_output_in_tx_index instead of real_output: cold-wallet pre-sign review shows wrong ring member
about 6 hours ago
Monero: wallet-rpc describe_transfer uses real_output_in_tx_index instead of real_output: cold-wallet pre-sign review shows...
Monero: SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hash
about 6 hours ago
Monero: SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hash
Monero: wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in check_tx_key / check_tx_proof)
about 6 hours ago
Monero: wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in...
Monero: `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment
about 6 hours ago
Monero: `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment
Monero: `check_reserve_proof` counts duplicate entries: one output can inflate `total`
about 6 hours ago
Monero: `check_reserve_proof` counts duplicate entries: one output can inflate `total`
curl: curl Missing Sec-WebSocket-Accept Verification Enables MITM WebSocket Session Hijacking
about 6 hours ago
curl: curl Missing Sec-WebSocket-Accept Verification Enables MITM WebSocket Session Hijacking
Monero: `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx`
about 12 hours ago
Monero: `relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet...
curl: Heap use-after-free (write) in mev_forget_socket() via reentrant curl_easy_pause() — incomplete fix for CVE-2026-9080
1 day ago
curl: Heap use-after-free (write) in mev_forget_socket() via reentrant curl_easy_pause() — incomplete fix...
AWS VDP: GitHub Retired UsernameTakeover From [aws/████████]
2 days ago
AWS VDP: GitHub Retired UsernameTakeover From [aws/████████]
Rocket.Chat: Unauthenticated Path Traversal (LFI) via /custom-sounds/ when CustomSounds uses FileSystem storage
2 days ago
Rocket.Chat: Unauthenticated Path Traversal (LFI) via /custom-sounds/ when CustomSounds uses FileSystem storage
curl: SMTP CRLF injection in custom SMTP recipient operand allows additional SMTP commands after authentication
2 days ago
curl: SMTP CRLF injection in custom SMTP recipient operand allows additional SMTP...