Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'demsese' 
b'arbitrary file read via `file://` path traversal with `--path-as-is`'

01 Jul 2025

b'curl' disclosed a bug submitted by b'freak_coding' 
b'Heap buffer overflow vulnerability in conncache.c: incorrect use of pointer arrays resulting in out-of-bounds memory writes.'

01 Jul 2025

b'curl' disclosed a bug submitted by b'wolfsage' 
b'curl -OJ allows creating custom .curlrc file which allows exfiltrating private data, among other things'

01 Jul 2025

b'curl' disclosed a bug submitted by b'wolfsage' 
b'curl_easy_header runs at O(N) or worse and can be abused to use minute(s) of CPU time'

01 Jul 2025

b'curl' disclosed a bug submitted by b'oicus' 
b'[High] MITM via Insecure CA Path Handling in cURL (--capath, CURLOPT_CAPATH) (CWE-494: Download of Code Without Integrity Check)'

30 Jun 2025

b'curl' disclosed a bug submitted by b'oicus' 
b'[High] Arbitrary File Write via Path Traversal in cURL CLI (`-o`, `--output`) (CWE-22: Improper Limitation of a Pathname to a Restricted Directory)'

30 Jun 2025

b'curl' disclosed a bug submitted by b'redfoxsec' 
b'Potential XSS vector in curl via unsanitized URL parameter handling'

30 Jun 2025

b'curl' disclosed a bug submitted by b'tdp3kel9g' 
b'Double free caused by mqtt_doing()'

30 Jun 2025

b'curl' disclosed a bug submitted by b'cyberguardianrd' 
b"Buffer Overflow in curl's Rustls Backend"

30 Jun 2025

b'curl' disclosed a bug submitted by b'agent_0' 
b'Stack-based Buffer Overflow in TELNET NEW_ENV Option Handling'

30 Jun 2025

b'Yelp' disclosed a bug submitted by b'0xold' 
b'RXSS AT https://proze.yelp.com/tmsubscribe.net/vidsn.aspx'

30 Jun 2025

b'Cosmos' disclosed a bug submitted by b'unknown_feature' 
b'Making transfer v2 channel unupgradable through the forwarding '

30 Jun 2025

b'Cosmos' disclosed a bug submitted by b'unknown_feature' 
b'Replacing ICA active channel during the upgrade and a bit more'

30 Jun 2025

b'Tools for Humanity' disclosed a bug submitted by b'polem4rch' 
b'Unlock underage blocked app without support interaction using airplane mode'

30 Jun 2025

b'curl' disclosed a bug submitted by b'geeknik' 
b'Heap Buffer Overflow in libcurl curl_slist_append via Unterminated String'

30 Jun 2025

b'curl' disclosed a bug submitted by b'catenacyber' 
b'Memory leak from doh_write_cb'

29 Jun 2025

b'Cosmos' disclosed a bug submitted by b'unknown_feature' 
b'Unauthorized coins transfer from locking account(s)'

29 Jun 2025

b'curl' disclosed a bug submitted by b'evilginx1' 
b'HTTP/2 CONTINUATION Flood Vulnerability'

28 Jun 2025

b'curl' disclosed a bug submitted by b'ziad616' 
b'Path Traversal Vulnerability in curl via Unsanitized IPFS_PATH Environment Variable'

28 Jun 2025

b'curl' disclosed a bug submitted by b'deep-hackerone' 
b'Buffer Overflow in curl MQTT Test Server (tests/server/mqttd.c) via Malicious CONNECT Packet'

28 Jun 2025

1 2 3 4 5 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM