Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'w2w' 
b'Public GitHub repositories for multiple HackerOne managed triage team profiles contain private HackerOne reports information'

31 May 2025

b'8x8 Bounty' disclosed a bug submitted by b'kauenavarro' 
b'Information Disclosure of metrics fax.wavecell.com/metrics'

30 May 2025

b'Omise' disclosed a bug submitted by b'vulnerability_is_here' 
b'Facebook Username Takeover via Broken Link in Footer'

30 May 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb' 
b'Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli'

29 May 2025

b'Fastify' disclosed a bug submitted by b'oblivionsage' 
b'Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)'

28 May 2025

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2025-5025: No QUIC certificate pinning with wolfSSL'

28 May 2025

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2025-4947: QUIC certificate check skip with wolfSSL'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd' 
b'Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025

b'Mars' disclosed a bug submitted by b'bughunter0x7' 
b'unauthorized access and add user and change personal information all users'

27 May 2025

b'Mars' disclosed a bug submitted by b'bughunter0x7' 
b'Customer Data Exposure via Insecure Endpoint of coupon'

27 May 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'nxczje' 
b'Apache Airflow Sql injection by authenticated user'

27 May 2025

1 2 3 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM