http://www.telecomitalia.com/tit/it/footer/responsible-disclosure.html
https://voidsec.com/telegram-secret-chat-bug/
(undisclosed)
(undisclosed)
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbgn03686en_us
https://ssd-disclosure.com/ssd-advisory-angular-cli-authentication-bypass/
https://voidsec.com/linkedin-csv-injection/
http://pages.ebay.com/securitycenter/ResearchersAcknowledgement.html
(undisclosed)

Severity: Medium

ghost v.<0.5.9 is affected by a Denial of Service (DoS) attack, via filesystem exhaustion. When updating a user avatar, the previous one is saved and not deleted. Also, the file size of the avatar is not limited.