REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'currentImage' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'wikitext' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting via URL on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting via URL on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'RAISED_FUNDS_DESC' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'autoPlay' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'description_extra' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'the_reinhardt'
b'Reflected XSS in `Telerik.ReportViewer.axd` with F5 BIG-IP ASM Bypass on ``'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'jonasdiasrebelo'
b"Cross-Site Scripting via 'EVENT_DESCRIPTION' parameter"
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'silentbreach'
b'Unauthenticated File Read Adobe ColdFusion'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'marucube35'
b'Secret Access Key of AWS Firehose Disclosure'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'aldenpartridge'
b'Exposed Extremely Sensitive Information in Public ZIP File'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'oxylis'
b'Air Force candidate PII + recruitment chat logs accessible via BAC/IDOR on (very large/significant exposure)'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'badlifeguard'
b'ASBS viewing other soldiers PII/Board/Board Voters/ETC'
12 Jan 2026
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'rocky1696'
b'[Critical Data Breach] Exposure of PII Data Leak via API Response'
12 Jan 2026
1
...
22
23
24
25
26
...
772
BY DENIS WERNER - @NOBBD -
IMPRESSUM