The unofficial HackerOne disclosure Timeline

b'Autodesk' disclosed a bug submitted by b'who_am_i_'
b'Stored XSS in AREA tutorials'

25 Aug 2025 timeline

b'Omise' disclosed a bug submitted by b'mantu1738'
b'PII Exposure via Email Confirmation Link Email Embedded in Token & Leaked via Wayback Machine'

23 Aug 2025 timeline

b'Brave Software' disclosed a bug submitted by b'stellersjay'
b'Prompt Injection via GitHub Patch in Brave AI Chat (Leo)'

22 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'balajidev'
b'Missing Security Headers'

22 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'robert_min1'
b'curl leaks destination IP via glibc getaddrinfo() UDP connect, bypassing SOCKS5/Tor'

20 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'irene1hacker'
b'Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TO'

20 Aug 2025 timeline

b'WakaTime' disclosed a bug submitted by b'pashaaaaaaaa'
b'Invalid'

19 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'pelioro'
b'WebSocket Fragmentation DoS on Curl Client'

19 Aug 2025 timeline

b'Insightly' disclosed a bug submitted by b'akostak'
b'Email verification bypass via request to endpoint "accounts.insightly.com/signup/provisionuser"'

18 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'assassin_marcos'
b'No SPF/DMARC records on mb-cosmos.com'

18 Aug 2025 timeline

18 Aug 2025 disclosed a bug submitted by Title Heap Use-After-Free Vulnerability in `curl` Leading to Potential Code Execution'
b'

b'irene1hacker' timeline

b'Malwarebytes' disclosed a bug submitted by b'sijojohnson'
b'Email Verification Bypass via Race Condition'

15 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'mantu1738'
b'Replayable Password Change Request Across Sessions.'

15 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'tarun_sec'
b'Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 ) '

15 Aug 2025 timeline

b'Shopify' disclosed a bug submitted by b'sahill_chavda'
b'Staff with Restricted Permissions Could Access Customer Data After Company Removal'

15 Aug 2025 timeline

b'Shopify' disclosed a bug submitted by b'saltymermaid'
b'URL Path Manipulation Enables Cache Poisoning of Amazon Affiliate Products in Shopify Linkpop'

14 Aug 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'ricardojoserf'
b'Remote Code Execution in Amazon MWAA due to outdated Apache Airflow version'

14 Aug 2025 timeline

b'8x8 Bounty' disclosed a bug submitted by b'abdallasamir12'
b'.8x8.vc/index.js: Exposed Google Maps API Key Allowing Potential Abuse of Paid Services'

14 Aug 2025 timeline

b'HackerOne' disclosed a bug submitted by b'madara_'
b'Internal Access to Hackerone confluence Docs'

13 Aug 2025 timeline

b'SingleStore' disclosed a bug submitted by b'q11x'
b'Exceed the maximum number of subscribers using Race Condition '

12 Aug 2025 timeline

1 ... 32 33 34 35 36 ... 810

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.