Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Revive Adserver' disclosed a bug submitted by b'vidang04' 
b'Reflected XSS in /admin/banner-zone.php (v6.0.0+)'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Information Disclosure via Verbose Error Messages'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'cyberjoker' 
b'IDOR Vulnerability in Banner Deletion '

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Information Disclosure via Add user lookup in Account Management (User Access)'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'cyberjoker' 
b'Stored XSS in Conversion Statistics via Tracker Name'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Stored XSS on inventory-retrieve.php'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Improper sanitisation of input in the settings could cause DoS'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'lu3ky-13' 
b'Reflected XSS in account-preferences-plugin.php'

19 Nov 2025

b'Revive Adserver' disclosed a bug submitted by b'yoyomiski' 
b'Authorization bypass allows changing email address of other users'

19 Nov 2025

b'curl' disclosed a bug submitted by b'xkernel' 
b'Double free in tool_ssls_load()'

18 Nov 2025

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'david96' 
b"Bypass of Cloudflare's Cache Keys and WAF via header overflow"

18 Nov 2025

b'lemlist' disclosed a bug submitted by b'0hmz' 
b'Authentication Bypass in Subscription Management Endpoint'

17 Nov 2025

b'curl' disclosed a bug submitted by b'xkernel' 
b'Double-free vulnerability in libcurl with rustls via NoServerCertVerifier condition leads to application crash'

16 Nov 2025

b'curl' disclosed a bug submitted by b'pelioro' 
b'Incorrect sizeof() in Rustls Backend Memory Allocation'

15 Nov 2025

b'curl' disclosed a bug submitted by b'pelioro' 
b'Off-by-One Buffer Overflow in SMB Path Handler'

15 Nov 2025

b'curl' disclosed a bug submitted by b'djogho' 
b'Malicious server forces .curlrc creation via curl -OJ leading to local file exfiltration'

15 Nov 2025

b'AWS VDP' disclosed a bug submitted by b'xtawb' 
b'Responsible disclosure - public S3 bucket exposing JSON/config files'

14 Nov 2025

b'lemlist' disclosed a bug submitted by b'sle3pyhead' 
b' Authentication Token Theft via Open Redirect in Callback URL Parameter'

14 Nov 2025

b'curl' disclosed a bug submitted by b'ahn0x' 
b'libcurl FTP path normalization flaw allows decoded %2e%2e CWD .. and directory escape (Path Traversal, CWE-22)'

11 Nov 2025

b'curl' disclosed a bug submitted by b'skymander' 
b'Hash exposed in public repository'

11 Nov 2025

1 2 3 4 5 ... 745

BY DENIS WERNER - @NOBBD - IMPRESSUM