The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'hackerpllim'
b'Hi Hacker'

03 Nov 2025 timeline

b'curl' disclosed a bug submitted by b'oliverkremer'
b'Directory Traversal Vulnerability in cURL via Content-Disposition Header Processing'

01 Nov 2025 timeline

b'Hiro' disclosed a bug submitted by b'craxermgr'
b'No Confirmation Email For Email Change'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'craxermgr'
b'Information Disclosure'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'vyshnav_nk'
b'REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'myskar'
b'Missing restriction on string size of Full Name at browser.blockstack.org'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'myskar'
b'Can view all username leaked in https://core.blockstack.org'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'droop3r'
b'Invalidate active sessions after password change'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'0x1_aulia'
b'blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'frozensolid'
b'Blockstack Browser For Mac leaks "Core API Password" to 3rd parties'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'anonymous--1000'
b'Logout Bypass Vulnerability in Hiro.so'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'sagorhawlader'
b'Buffer over-read,, Missing NUL termination in addvariable() causes undefined behavior'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'abdullah-107'
b'SOCKS5 Heap Buffer Overflow via Malicious HTTP Redirect with Oversized Hostname'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'exploitguru101'
b'Logical Flaw in curl_url_set Leads to Inconsistent Query Parameter Encoding'

29 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'tjbecker_theori'
b'Memory leak in Curl_auth_create_ntlm_type3_message'

28 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'curls persistence files inherit world-readable/writable perms from umask, leaking and tampering with cookies/HSTS/Alt-Svc caches'

28 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'max_from_secmate'
b'libcurl MQTT PUBLISH length overflow (heap overflow)'

28 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'Cookie exposure due to unexpected file permission change'

27 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'sippysir'
b'CURLX_SET_BINMODE(NULL) can call fileno(NULL) and cause undefined behavior / crash'

27 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'asdkjhasldkjahslfdkjfa'
b'Integer Overflow to Heap Overflow in DoH Response Handling'

25 Oct 2025 timeline

1 ... 30 31 32 33 34 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.