Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Bykea' disclosed a bug submitted by b'sameer_ali' 
b'Lack of minimum value bid wheel verification on customer_bid in Rental Trips'

20 Nov 2025

b'Bykea' disclosed a bug submitted by b'sameer_ali' 
b'Customer can cancel a individual booking in a batch, causing locking of partner.'

20 Nov 2025

b'AWS VDP' disclosed a bug submitted by b'savannabungee' 
b'Existence of completed pods allows for bypass of Kubernetes NetworkPolicy'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'vidang04' 
b'Unrestricted setPerPage allows huge result sets / resource exhaustion / mass log retrieval'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Username normalization missing allows visually indistinguishable accounts (Whitespace-Based Impersonation)'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'vidang04' 
b'Stored-XSS in campaign name displayed in Banners modal'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Stored-XSS in Banner Name field '

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'vidang04' 
b'Reflected XSS in /admin/banner-zone.php (v6.0.0+)'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Information Disclosure via Verbose Error Messages'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'cyberjoker' 
b'IDOR Vulnerability in Banner Deletion '

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Information Disclosure via Add user lookup in Account Management (User Access)'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'cyberjoker' 
b'Stored XSS in Conversion Statistics via Tracker Name'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Stored XSS on inventory-retrieve.php'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Improper sanitisation of input in the settings could cause DoS'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Reflected XSS in account-preferences-plugin.php'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Authorization bypass allows changing email address of other users'

19 Nov 2025

b'curl' disclosed a bug submitted by b'xkernel' 
b'Double free in tool_ssls_load()'

18 Nov 2025

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'david96' 
b"Bypass of Cloudflare's Cache Keys and WAF via header overflow"

18 Nov 2025

b'lemlist' disclosed a bug submitted by b'0hmz' 
b'Authentication Bypass in Subscription Management Endpoint'

17 Nov 2025

b'curl' disclosed a bug submitted by b'xkernel' 
b'Double-free vulnerability in libcurl with rustls via NoServerCertVerifier condition leads to application crash'

16 Nov 2025

1 ... 8 9 10 11 12 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM