Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederrss.ricterz.me
HackerOne Hacker Activity
Get the latest updates from HackerOne Hacker Activity directly as they happen.
Follow now 110 followers
Latest posts
Last updated about 1 hour ago
[$200] HackerOne: HackerOne Code sends live password-reset tokens to Segment in automatic page events
about 1 hour ago
[$200] HackerOne: HackerOne Code sends live password-reset tokens to Segment in automatic...
Nextcloud: Improper input validation in emoji field leads to sidebar UI denial of service
4 days ago
Nextcloud: Improper input validation in emoji field leads to sidebar UI denial...
curl: TELNET control and environment data bypass HTTPS-proxy TLS
5 days ago
curl: TELNET control and environment data bypass HTTPS-proxy TLS
curl: Use-after-free of the internal multi->admin easy handle via the documented CURLMOPT_NOTIFYFUNCTION callback
5 days ago
curl: Use-after-free of the internal multi->admin easy handle via the documented CURLMOPT_NOTIFYFUNCTION...
curl: HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled
5 days ago
curl: HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding...
Nextcloud: files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner, survives share revocation and account delet
6 days ago
Nextcloud: files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently...
Nextcloud: Persistent SMTP header injection via identity `organization` / `name`
6 days ago
Nextcloud: Persistent SMTP header injection via identity `organization` / `name`
Essity: Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████
6 days ago
Essity: Unauthenticated API allows reading, writing to and deleting any user's private...
curl: Socket API drops expired timeouts for transfers queued behind a connection limit
6 days ago
curl: Socket API drops expired timeouts for transfers queued behind a connection...
[$500] DuckDuckGo: SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )
7 days ago
[$500] DuckDuckGo: SSRF with bypass leads to client side hosting / vulnerabilities...
Monero: ZMQ get_output_distribution duplicate amount DoS
7 days ago
Monero: ZMQ get_output_distribution duplicate amount DoS
Monero: Restricted ZMQ RPC bypasses HTTP restricted-mode resource checks
7 days ago
Monero: Restricted ZMQ RPC bypasses HTTP restricted-mode resource checks