Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'0x0doteth' 
b'Approval app allows users to request approval for other users file '

05 Dec 2025

b'Nextcloud' disclosed a bug submitted by b'0x0doteth' 
b' Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)'

05 Dec 2025

b'curl' disclosed a bug submitted by b'anonymous_237' 
b'SMTP Protocol Injection via CRLF in CURLOPT_MAIL_FROM leading to Email Spoofing'

04 Dec 2025

b'Django' disclosed a bug submitted by b'stackered' 
b'Potential SQL Injection when annotating FilteredRelation on PostgreSQL'

02 Dec 2025

b'Stripo Inc' disclosed a bug submitted by b'odaysec' 
b'[my.stripo.email] Blind SSRF Vulnerability in Stripo App Export via Missing Endpoints Export Email Message to Zapier'

01 Dec 2025

b'curl' disclosed a bug submitted by b'quello_stanco' 
b'Path Traversal in file:// protocol allows Arbitrary File Read'

01 Dec 2025

b'curl' disclosed a bug submitted by b'helspy' 
b'Heap Buffer Overflow in TFTP'

01 Dec 2025

b'Revive Adserver' disclosed a bug submitted by b'kassem_s94' 
b'Username Validation Bypass'

26 Nov 2025

b'curl' disclosed a bug submitted by b'kak1' 
b'Infinite loop issue in the state machine of the curl project'

26 Nov 2025

b'curl' disclosed a bug submitted by b'lim_e' 
b'runs javascript on powershell when it shouldnt'

26 Nov 2025

b'Flickr' disclosed a bug submitted by b'maskopatol' 
b'High resource consumption by insufficient sanitization of forum threads pagination'

24 Nov 2025

b'curl' disclosed a bug submitted by b'cainvsilf' 
b'[SFTP] TOCTOU Race Condition in Upload Resume Logic Leads to Arbitrary File Append'

24 Nov 2025

b'M&T Bank Vulnerability Disclosure' disclosed a bug submitted by b'ozgun32' 
b'HTML Injection in Emails on login.mtb.com via givenName parameter leads to phishing attacks'

24 Nov 2025

b'curl' disclosed a bug submitted by b'letshack9707' 
b"Arbitrary free in curl's config file parsing."

23 Nov 2025

b'Basecamp' disclosed a bug submitted by b'stackered' 
b'Improper bot-authentication allows to impersonate any user when sending messages in a room'

21 Nov 2025

b'Django' disclosed a bug submitted by b'stackered' 
b'Path traversal via archive.extract - CVE 2021-3281 incomplete patch'

21 Nov 2025

b'curl' disclosed a bug submitted by b'gaurav_7777' 
b'Out-of-bounds read in HTTP method handling causes undefined behavior and potential crash This is sharp, Gaurav. Weve got a real memory-safety bug ins'

20 Nov 2025

b'Bykea' disclosed a bug submitted by b'sameer_ali' 
b'Lack of minimum value bid wheel verification on customer_bid in Rental Trips'

20 Nov 2025

b'Bykea' disclosed a bug submitted by b'sameer_ali' 
b'Customer can cancel a individual booking in a batch, causing locking of partner.'

20 Nov 2025

b'AWS VDP' disclosed a bug submitted by b'savannabungee' 
b'Existence of completed pods allows for bypass of Kubernetes NetworkPolicy'

19 Nov 2025

1 ... 27 28 29 30 31 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM