The unofficial HackerOne disclosure Timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo'
b'Cross-Site Scripting (XSS) in ASP.NET via ResolveUrl on '

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jonasdiasrebelo'
b"Cross-Site Scripting via 'EVENT_DESCRIPTION' parameter"

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'silentbreach'
b'Unauthenticated File Read Adobe ColdFusion'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'marucube35'
b'Secret Access Key of AWS Firehose Disclosure'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'aldenpartridge'
b'Exposed Extremely Sensitive Information in Public ZIP File'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'oxylis'
b'Air Force candidate PII + recruitment chat logs accessible via BAC/IDOR on (very large/significant exposure)'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'badlifeguard'
b'ASBS viewing other soldiers PII/Board/Board Voters/ETC'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rocky1696'
b'[Critical Data Breach] Exposure of PII Data Leak via API Response'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xr2r'
b'DNN - Unrestricted Arbitrary File Upload #'

12 Jan 2026 timeline

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xr2r'
b'GlobalProtect - OS Command Injection #'

12 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'darksql'
b'Heap Out-of-Bounds Read in lib/http2.c via Malformed PUSH_PROMISE Headers'

10 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'unknowperson0212'
b'CRLF Injection in HTTP header values allows arbitrary header injection'

10 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'raulvdv'
b'State Isolation Failure in Multiplexed Connections (Shared Auth Context)'

08 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'han_ank'
b'Stack Buffer Overflow in mprintf.c formatting function (fallback path)'

08 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'unknowperson0212'
b'inconsistently Rejection Logic in file:// URLs with Authority'

08 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'anonymous_237'
b'CVE-2025-14524: bearer token leak on cross-protocol redirect'

07 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2025-15079: libssh global knownhost override '

07 Jan 2026 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'CVE-2025-15224: libssh key passphrase bypass without agent set'

07 Jan 2026 timeline

b'UPchieve' disclosed a bug submitted by b'guusverbeek'
b'Postgres Admin Username and Password in Plain text'

06 Jan 2026 timeline

1 ... 26 27 28 29 30 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.