Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'lemlist' disclosed a bug submitted by b'mcdave' 
b'Unauthorized Password Reset Allows Account Takeover Across Tenant Boundaries'

07 Nov 2025

b'Lovable VDP' disclosed a bug submitted by b'anxioussick' 
b'Low-privileged user can enable or disable Lovable AI for new projects in workspace'

07 Nov 2025

b'Django' disclosed a bug submitted by b'cyberstan' 
b'SQL Injection in Django ORM via Unvalidated `_connector` in Q Objects'

06 Nov 2025

b'curl' disclosed a bug submitted by b'giant_anteater' 
b'CVE-2025-10966: missing SFTP host verification with wolfSSH'

05 Nov 2025

b'Lovable VDP' disclosed a bug submitted by b'd0maxploit' 
b'Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)'

04 Nov 2025

b'Lovable VDP' disclosed a bug submitted by b'd0maxploit' 
b'Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)'

04 Nov 2025

b'Mozilla' disclosed a bug submitted by b'xhacking_z' 
b'Microsoft `x-apikey` Exposed in Mozilla CI Public Logs'

03 Nov 2025

b'curl' disclosed a bug submitted by b'hackerpllim' 
b'HackerOne'

03 Nov 2025

b'curl' disclosed a bug submitted by b'hackerpllim' 
b'Hi Hacker'

03 Nov 2025

b'curl' disclosed a bug submitted by b'oliverkremer' 
b'Directory Traversal Vulnerability in cURL via Content-Disposition Header Processing'

01 Nov 2025

b'Hiro' disclosed a bug submitted by b'craxermgr' 
b'No Confirmation Email For Email Change'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'craxermgr' 
b'Information Disclosure'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'vyshnav_nk' 
b'REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'myskar' 
b'Missing restriction on string size of Full Name at browser.blockstack.org'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'myskar' 
b'Can view all username leaked in https://core.blockstack.org'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'droop3r' 
b'Invalidate active sessions after password change'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'0x1_aulia' 
b'blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'frozensolid' 
b'Blockstack Browser For Mac leaks "Core API Password" to 3rd parties'

31 Oct 2025

b'Hiro' disclosed a bug submitted by b'anonymous--1000' 
b'Logout Bypass Vulnerability in Hiro.so'

31 Oct 2025

1 2 3 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM