-
Notifications
You must be signed in to change notification settings - Fork 3
Pull requests: maekuss/testerror
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: prevent stack buffer overflow in handle_name
#127
opened Jul 24, 2026 by
hacktron-app-stg
Bot
Loading…
fix(infra): harden prod RDS instance — disable public access, encrypt at rest, remove hardcoded password
#123
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix(infra): restrict overly permissive security group ingress
#122
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix(infra): make backups S3 bucket private and block public access
#121
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: disable privileged mode on web container
#120
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: remove full host filesystem hostPath mount from web deployment
#119
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: run web container as non-root and disable privilege escalation
#118
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: disable host network and PID namespace sharing in deployment
#117
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: eliminate TOCTOU race and path traversal in realtime save handler
#113
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: pin JWT signing algorithm to prevent HS/RS confusion in verifyToken
#109
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: bound gzip decompression in /import to prevent decompression bomb DoS
#108
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: use hash_equals for legacy auth token comparison
#107
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: remove extract($_GET) variable overwrite in legacy_auth.php
#106
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: remove hardcoded auth token and type-juggling bypass in legacy_auth.php
#105
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: remove assert() RCE sink in legacy_auth.php
#104
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
fix: enforce ownership check on /accounts/:id to close IDOR
#103
opened Jul 23, 2026 by
hacktron-app-stg
Bot
Loading…
Previous Next
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.