Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'l0rdv0ld3m0r7' 
b'Publicly Accessible CDN Endpoint Exposing XML Metadata (including ETag)'

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'exec_iq' 
b'Create account without auth via response manipulation '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'xgoon' 
b'Information Disclosure via Publicly Accessible Debug Log'

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'saqib98' 
b'Debug Info disclose '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xkarim_dix' 
b'Reflected XSS Vulnerability in SSL VPN Endpoint CVE-2025-0133'

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'aramx4' 
b'Reflected XSS via user Parameter in /ssl-vpn/getconfig.esp'

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'aramx4' 
b'Reflected XSS via user Parameter on getconfig.esp Endpoint'

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bewgsy' 
b'XSS on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting via URL on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b"Cross-Site Scripting via 'currentImage' parameter"

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b"Cross-Site Scripting via 'wikitext' parameter"

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting via URL on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b'Cross-Site Scripting via URL on '

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b"Cross-Site Scripting via 'RAISED_FUNDS_DESC' parameter"

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b"Cross-Site Scripting via 'autoPlay' parameter"

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo' 
b"Cross-Site Scripting via 'description_extra' parameter"

12 Jan 2026

b'U.S. Dept Of Defense' disclosed a bug submitted by b'the_reinhardt' 
b'Reflected XSS in `Telerik.ReportViewer.axd` with F5 BIG-IP ASM Bypass on ``'

12 Jan 2026

1 ... 25 26 27 28 29 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM