Skip to content

Commit d3fe1cf

Browse files
xet7xet7
committed
Apply disclosure contribution star ranking from published advisories
1 parent 6808ceb commit d3fe1cf

88 files changed

Lines changed: 579 additions & 601 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎hall-of-fame/Audit.md‎

Lines changed: 168 additions & 190 deletions
Large diffs are not rendered by default.

‎hall-of-fame/adminbleed/index.html‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -45,10 +45,10 @@ <h2><i class="fa fa-unlock-alt" aria-hidden="true"></i>
4545
<td valign="top">2023-04-24 16.40 EET</td>
4646
<td valign="top">
4747
<b>Christian Pöschl of <a href="https://www.usd.de">usd AG Responsible Disclosure Team</a></b><br />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" />
51-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
48+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
49+
50+
51+
<br />
5252
Sent report.</a>
5353
</td>
5454
<td valign="top">
@@ -82,19 +82,19 @@ <h2><i class="fa fa-unlock-alt" aria-hidden="true"></i>
8282
## usd-2023-0008 | WeKan 6.85.0 - Broken Access Control
8383

8484
### Details
85-
**Advisory ID**: usd-2023-0008
86-
**Product**: WeKan
87-
**Affected Version**: <=6.85
88-
**Vulnerability Type**: Broken Access Control (CWE-284)
89-
**Security Risk**: High (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
90-
**Vendor URL**: https://github.com/wekan/wekan
91-
**Vendor acknowledged vulnerability**: Yes / No
92-
**Vendor Status**: Not fixed / Fixed
93-
**Advisory Status**: Open/Published
94-
**CVE number**: Not requested yet
95-
**CVE Link**: Not requested yet
96-
**First Published**: Not published yet
97-
**Last Update**: 2023-04-24
85+
**Advisory ID**: usd-2023-0008
86+
**Product**: WeKan
87+
**Affected Version**: <=6.85
88+
**Vulnerability Type**: Broken Access Control (CWE-284)
89+
**Security Risk**: High (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
90+
**Vendor URL**: https://github.com/wekan/wekan
91+
**Vendor acknowledged vulnerability**: Yes / No
92+
**Vendor Status**: Not fixed / Fixed
93+
**Advisory Status**: Open/Published
94+
**CVE number**: Not requested yet
95+
**CVE Link**: Not requested yet
96+
**First Published**: Not published yet
97+
**Last Update**: 2023-04-24
9898

9999
### Description
100100
Wekan is a free and open-source collaborative Kanban board application that enables users to visualize their workflow and manage tasks.
@@ -117,8 +117,8 @@ <h2><i class="fa fa-unlock-alt" aria-hidden="true"></i>
117117
After all, more security can only be achieved if many individuals take on the task.
118118

119119
Our CST Academy and our usd HeroLab are essential parts of our security mission.
120-
We share the knowledge we gain in our practical work and our research through training courses and publications.
121-
In this context, the usd HeroLab publishes a series of papers on new vulnerabilities and current security issues.
120+
We share the knowledge we gain in our practical work and our research through training courses and publications.
121+
In this context, the usd HeroLab publishes a series of papers on new vulnerabilities and current security issues.
122122

123123
Always for the sake of our mission: "more security."
124124

‎hall-of-fame/anchorbleed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ <h1 class="hof">Contents / AnchorBleed</h1>
4343
<td valign="top">2026-02-12 11:16 EET</td>
4444
<td valign="top">
4545
<b>The <a href="https://securitylab.github.com">GitHub Security Lab</a> team</b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
48+
49+
50+
<br />
5151
Did send detailed report and fix!
5252
</td>
5353
<td valign="top">

‎hall-of-fame/assignedbleed/index.html‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -36,10 +36,10 @@ <h1 class="hof">Contents / AssignedBleed</h1>
3636
<td valign="top">
3737
<b><a href="https://github.com/Char0n1507">Char0n1507</a></b> and
3838
<b><a href="https://github.com/xet7">xet7</a></b><br />
39-
<img src="../GoldStar.png" width="30px" height="auto" />
40-
<img src="../GoldStar.png" width="30px" height="auto" />
41-
<img src="../GoldStar.png" width="30px" height="auto" />
42-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
39+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
40+
41+
42+
<br />
4343
Coordinated disclosure with a working reproduction and root-cause analysis.
4444
</td>
4545
<td valign="top">

‎hall-of-fame/authbleed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ <h1 class="hof">Contents / AuthBleed</h1>
4343
<td valign="top">2026-05-07 11:39 EET</td>
4444
<td valign="top">
4545
<b>Qiulin Deng</b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
48+
49+
50+
<br />
5151
Did send detailed report with full PoC and runtime verification!
5252
</td>
5353
<td valign="top">

‎hall-of-fame/authorbleed/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,8 @@ <h1 class="hof">Contents / AuthorBleed</h1>
4343
<td valign="top">2026-08-15</td>
4444
<td valign="top">
4545
<b><a href="https://github.com/ybsun0215">ybsun0215</a></b> and <b><a href="https://github.com/xet7">xet7</a></b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
<br />
4848
Coordinated disclosure via GitHub Security Advisory GHSA-6jr3-42jf-vhm5.
4949
</td>
5050
<td valign="top">

‎hall-of-fame/avatarbleed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ <h1 class="hof">Contents / AvatarBleed</h1>
4343
<td valign="top">2026-05-03 13:57 EET</td>
4444
<td valign="top">
4545
<b><a href="https://www.linkedin.com/in/trungnh/">Trung Nguyen</a> from <a href="https://cystack.net">CyStack Security</a></b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
48+
49+
50+
<br />
5151
Did send detailed report and suggested fix!
5252
</td>
5353
<td valign="top">

‎hall-of-fame/bflableed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ <h1 class="hof">Contents / BFLABleed</h1>
4343
<td valign="top">2026-05-19</td>
4444
<td valign="top">
4545
<b>Fredrik Dietrichson</b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
48+
49+
50+
<br />
5151
Did send detailed report with full PoC and runtime verification!
5252
</td>
5353
<td valign="top">

‎hall-of-fame/boardbleed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,11 @@ <h1 class="hof">Contents / BoardBleed</h1>
4343
<td valign="top">2026-06-11</td>
4444
<td valign="top">
4545
<b>0xzap</b> (coordinated disclosure) and <b>xet7</b><br />
46-
<img src="../GoldStar.png" width="30px" height="auto" />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
46+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
47+
48+
49+
50+
<br />
5151
Did send detailed report with PoC!
5252
</td>
5353
<td valign="top">

‎hall-of-fame/bypassbleed/index.html‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,11 +44,11 @@ <h1 class="hof">Contents / BypassBleed</h1>
4444
<td valign="top">
4545
<b><a href="https://twitter.com/dejandayoff">Dejan Zelic</a>, Justin Benjamin and others</b> at <a
4646
href="https://twitter.com/offsectraining">Offensive Security</a><br />
47-
<img src="../GoldStar.png" width="30px" height="auto" />
48-
<img src="../GoldStar.png" width="30px" height="auto" />
49-
<img src="../GoldStar.png" width="30px" height="auto" />
50-
<img src="../GoldStar.png" width="30px" height="auto" />
51-
<img src="../GoldStar.png" width="30px" height="auto" /><br />
47+
<img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" /><img src="../GoldStar.png" width="30px" height="auto" />
48+
49+
50+
51+
<br />
5252
Did send detailed report and helped fixing!
5353
</td>
5454
<td valign="top">

0 commit comments

Comments
 (0)