Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'oliverkremer' 
b'Directory Traversal Vulnerability in cURL via Content-Disposition Header Processing'

01 Nov 2025

b'Hiro' disclosed a bug submitted by b'craxermgr' 
b'No Confirmation Email For Email Change'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'craxermgr' 
b'Information Disclosure'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'vyshnav_nk' 
b'REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'myskar' 
b'Missing restriction on string size of Full Name at browser.blockstack.org'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'myskar' 
b'Can view all username leaked in https://core.blockstack.org'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'droop3r' 
b'Invalidate active sessions after password change'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'0x1_aulia' 
b'blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'frozensolid' 
b'Blockstack Browser For Mac leaks "Core API Password" to 3rd parties'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'anonymous--1000' 
b'Logout Bypass Vulnerability in Hiro.so'

31 Oct 2025

b'curl' disclosed a bug submitted by b'sagorhawlader' 
b'Buffer over-read,, Missing NUL termination in addvariable() causes undefined behavior'

31 Oct 2025

b'curl' disclosed a bug submitted by b'abdullah-107' 
b'SOCKS5 Heap Buffer Overflow via Malicious HTTP Redirect with Oversized Hostname'

31 Oct 2025

b'curl' disclosed a bug submitted by b'exploitguru101' 
b'Logical Flaw in curl_url_set Leads to Inconsistent Query Parameter Encoding'

29 Oct 2025

b'curl' disclosed a bug submitted by b'tjbecker_theori' 
b'Memory leak in Curl_auth_create_ntlm_type3_message'

28 Oct 2025

b'curl' disclosed a bug submitted by b'geeknik' 
b'curls persistence files inherit world-readable/writable perms from umask, leaking and tampering with cookies/HSTS/Alt-Svc caches'

28 Oct 2025

b'curl' disclosed a bug submitted by b'max_from_secmate' 
b'libcurl MQTT PUBLISH length overflow (heap overflow)'

28 Oct 2025

b'curl' disclosed a bug submitted by b'nyymi' 
b'Cookie exposure due to unexpected file permission change'

27 Oct 2025

b'curl' disclosed a bug submitted by b'sippysir' 
b'CURLX_SET_BINMODE(NULL) can call fileno(NULL) and cause undefined behavior / crash'

27 Oct 2025

b'curl' disclosed a bug submitted by b'asdkjhasldkjahslfdkjfa' 
b'Integer Overflow to Heap Overflow in DoH Response Handling'

25 Oct 2025

1 2 3 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM