Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'nyymi' 
b'curl --continue-at confusion'

07 Jul 2025

b'curl' disclosed a bug submitted by b'haithamzakaria' 
b'Information Disclosure at : https://curl.se/.mailmap'

07 Jul 2025

b'curl' disclosed a bug submitted by b'rono_07' 
b'information disclosure '

07 Jul 2025

b'curl' disclosed a bug submitted by b'nyymi' 
b'netrc crlf injection'

07 Jul 2025

b'curl' disclosed a bug submitted by b'mdakh404' 
b'curl mishandles `%0c%0b` sequences in HTTP responses leading to CRLF confusions, Headers and Cookies Injection'

07 Jul 2025

b'curl' disclosed a bug submitted by b'aadityaathehacker' 
b'Arbitrary File Deletion Vulnerability in curl Source Code via os.unlink()'

07 Jul 2025

b'curl' disclosed a bug submitted by b'spongebhav' 
b'-H with space prefix leads to previous header injection when used with --proxy'

07 Jul 2025

b'curl' disclosed a bug submitted by b'bulter' 
b'OS Command Injection (subprocess Module Usage)'

07 Jul 2025

b'curl' disclosed a bug submitted by b'tefa_' 
b'Git repository found'

07 Jul 2025

b'curl' disclosed a bug submitted by b'extramayoextracheeseextrafries' 
b'Integer Overflow Risk in HTTP/2 Proxy Window Size Calculations'

07 Jul 2025

b'Nintendo' disclosed a bug submitted by b'crazy_man123' 
b'[MK8DX] Improper ranking/replay file parsing'

06 Jul 2025

b'curl' disclosed a bug submitted by b'zzq1015' 
b'TLS Cipher Misconfiguration in HTTP/3/QUIC Support'

06 Jul 2025

b'curl' disclosed a bug submitted by b'skrcprst' 
b"CRLF injection in libcurl's SMTP client via --mail-from and --mail-rcpt allows SMTP command smuggling"

03 Jul 2025

b'Mozilla' disclosed a bug submitted by b'northsea' 
b'MozillaVPN: Elevation of Privilege via a Logic Vulnerability'

03 Jul 2025

b'Mozilla' disclosed a bug submitted by b'northsea' 
b'MozillaVPN: Elevation of Privilege via a Race Condition Vulnerability'

03 Jul 2025

b'Mozilla' disclosed a bug submitted by b'martinvw' 
b'Subdomain takeover on live.firefox.com'

03 Jul 2025

b'curl' disclosed a bug submitted by b'stogusho' 
b"curl doesn't hide credentials in /proc/XXX/cmdline provided via CLI arguments"

03 Jul 2025

b'curl' disclosed a bug submitted by b'justlikebono_official' 
b'Elevation of Privileges (EoP) vulnerabilities related to the some easy_options on Windows'

03 Jul 2025

b'curl' disclosed a bug submitted by b'voggerloops' 
b'Authorization Header Leak via --location-trusted in Curl'

03 Jul 2025

1 2 3 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM